Add native host management and role-based operator authentication

Introduce an outbound Python host agent, Debian installer, durable remote
operations, immutable game-file libraries, host-aware deployments and ports,
and occupancy-safe campaigns and draining. Native hosts do not require Komodo.

Add administrator, operator and viewer accounts, protected management routes,
secure sessions, password recovery, audit history and separate telemetry tokens.
Document first-admin setup, reporter migration and live-host acceptance checks.

Validation: 1,343 TypeScript tests and 39 agent tests passed, along with type
checking, the production build, compiled SSR/API smoke tests and administrator
recovery. Real Debian/Docker T5/T6 acceptance remains unrun.

src/lib/server/provisioning/worker.ts

@@ -12,6 +12,8 @@ import { cancelProvisioning } from './requests.js';
 import type { RuntimeAction } from '../../provisioning.js';
 import type { ProvisioningBlocker } from '../../provisioning-detail.js';
 import { recordProgress } from './progress.js';
+import { nativeInstance, nativeDeployment } from '../backends/native.js';
+import { processNativeProvisioning } from './native.js';
 
 const stoppedStates = new Set(['stopped', 'exited', 'created', 'dead']);
 export const isStopped = (state?: string) => stoppedStates.has(state?.toLowerCase() ?? '');
@@ -98,6 +100,19 @@ export function processProvisioning(): Promise<void> {
 export const processLifecycle = processProvisioning;
 
 async function run(): Promise<void> {
+    await processNativeProvisioning(operation => {
+        if (operation.action === 'create') return null;
+        if (operation.action === 'destroy') {
+            const other = db().prepare(`SELECT id FROM server_deployments WHERE server=? AND id!=? AND server_deleted_at IS NULL
+                AND (state='running' OR (state='awaiting-health' AND action NOT IN ('create','rebuild'))) LIMIT 1`).get(operation.server, operation.id);
+            return other ? 'Waiting for the current server operation.' : null;
+        }
+        const typed = operation as Operation;
+        const eligibility = sourceEligibility(typed);
+        if (eligibility === 'cancelled') { cancelProvisioning(operation.id, 'Requester cancelled or replaced this operation'); return 'Requester cancelled this operation.'; }
+        if (eligibility === 'held') return 'Waiting for the requester to resume.';
+        return blocker(operation.server, operation.id, typed.action)?.message ?? null;
+    });
     await processCreations();
     await processDestructions();
     await refreshRestartRollout();
@@ -105,6 +120,7 @@ async function run(): Promise<void> {
         WHERE server_deleted_at IS NULL AND action IN ('start','restart','stop','rebuild') AND (state = 'waiting' OR (action = 'stop' AND state = 'awaiting-health'))
         ORDER BY started_at, rowid`).all() as Operation[];
     for (const operation of operations) {
+        if (nativeDeployment(operation.id)) continue;
         try { await processOperation(operation); }
         catch (err) {
             // Observation failures are retried; remote mutations are never replayed.