feat: Add Conductor port reservation system for Google OAuth

[bokelley]

Summary

• Adds a port reservation system to eliminate the need to constantly update Google OAuth redirect URIs for new Conductor workspaces
• Implements environment variable validation to ensure proper configuration
• Provides automatic port management with reservation and release capabilities

Problem

When creating new Conductor workspaces, each workspace gets randomly generated ports. This requires adding new redirect URIs to Google OAuth configuration every time, which is tedious and error-prone.

Solution

This PR introduces a port reservation system that:

1. Uses a predefined pool of 10 port sets (Admin UI ports 8002-8011)
2. Automatically reserves ports when creating workspaces
3. Automatically releases ports when cleaning up workspaces
4. Falls back to hash-based ports if the reservation system fails

Key Features

Port Reservation System

• 10 predefined port sets that can be registered once with Google OAuth
• File locking to prevent conflicts between concurrent operations
• Automatic management - ports are reserved on setup and released on cleanup
• Easy monitoring with python3 manage_conductor_ports.py list

Environment Variable Validation

• Required variables checked:
  • SUPER_ADMIN_EMAILS - for Admin UI access
  • GEMINI_API_KEY - for creative generation
  • GOOGLE_CLIENT_ID/SECRET - for OAuth login
• Helpful guidance provided for missing variables
• Interactive prompt to continue despite missing variables

Files Added

• manage_conductor_ports.py - Port reservation manager with file locking
• conductor_ports.json - Configuration with 10 predefined port sets
• cleanup_conductor_workspace.sh - Cleanup script that releases ports
• CONDUCTOR_PORTS.md - Complete documentation

Setup Instructions

1. Run python3 manage_conductor_ports.py oauth-urls to get all redirect URLs
2. Add these 10 URLs to your Google OAuth app (ports 8002-8011)
3. Set required environment variables in your shell
4. Create workspaces - they'll automatically use reserved ports

Test plan

• Create a new Conductor workspace and verify port reservation
• Check that environment variables are validated
• Verify cleanup script releases ports properly
• Test concurrent workspace creation (file locking)
• Verify fallback to hash-based ports works

🤖 Generated with Claude Code