[fga] Introduce sshkeyservice

[jeanp413]

Description

Summary generated by Copilot

🤖 Generated by Copilot at b816b9d

This pull request introduces SSH key management functionality to the server component, by adding a new SSHKeyService class that handles the logic of creating, updating, and deleting SSH keys for users and workspaces. It also adds unit tests for the service class and refactors the GitpodServerImpl class to use the service methods.

Related Issue(s)

Fixes https://linear.app/gitpod/issue/EXP-394/

Preview status

gitpod:summary

Build Options

Build

• /werft with-werft
  Run the build with werft instead of GHA
• leeway-no-cache
• /werft no-test
  Run Leeway with --dont-test

Publish

• /werft publish-to-npm
• /werft publish-to-jb-marketplace

Installer

• analytics=segment
• with-dedicated-emulation
• workspace-feature-flags
  Add desired feature flags to the end of the line above, space separated

Preview Environment / Integration Tests

• /werft with-local-preview
  If enabled this will build install/preview
• /werft with-preview
• /werft with-large-vm
• /werft with-gce-vm
  If enabled this will create the environment on GCE infra
• with-integration-tests=all
  Valid options are all, workspace, webapp, ide, jetbrains, vscode, ssh. If enabled, with-preview and with-large-vm will be enabled.
• with-monitoring

/hold

[svenefftinge]

Thanks @jeanp413!
I have added one commit that adds an additional requestorId to the service methods. In this case we don't yet have clients where that is not the same as the userId owning the sshkeys, but we apply this pattern everywhere (first arg is the requestor) to be able to allow other users (e.g. admins) to access any resources.
In the other services we have so far named the first arg userId but that is confusing when we are talking about the user a s a resources, so I opted for changing this to requestorId. We should go through the other services and rename the first argument from userId -> requestorId as well.

[svenefftinge]

/unhold