Add key-and-server-id authenticated endpoints for server heartbeat, event ingestion, and command pull/ack. Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
