feat(falco): expose reload status and Unix socket control
Add process identity, reload generations, and readiness observation through
GET /reload for Falco Operator integration. Publish readiness after all
enabled sources start and distinguish rejected validation from application.
Add an opt-in Linux Unix socket listener. POST /reload queues a request and
returns 202 with a generation baseline; clients poll GET /reload for the
outcome. Keep POST exclusive to the Unix socket and document TCP observation
independently of reload_control.
Protect the socket with directory ownership, permissions, path checks, and
exclusive listener ownership. Validate its directory during dry-run before
stopping the active runtime, repeat checks at startup, and reject multipart
bodies. Cover status semantics, HTTP behavior, credential isolation, cleanup,
invalid directories, and real reloads with the existing C++ test suite.
Signed-off-by: c2ndev <[email protected]>
SOCIAL SHARE CARD GENERATOR