feat: move in the cli grpc interceptor logic, support service account…

… in env

Move the logic of siderov1 GRPC (re)authentication logic common in Talos and Omni into this lib.

Read service account environment variables (`SIDERO_SERVICE_ACCOUNT_KEY` and `OMNI_SERVICE_ACCOUNT_KEY`) and respect them (previously, talosctl did not work with service accounts).

Suppress the `xdg-open` errors when authenticator attempts to open the browser of the user.

Refactor the interceptor code to have better namings.

Rekres.

Signed-off-by: Utku Ozdemir <utku.ozdemir@siderolabs.com>

.codecov.yml

@@ -1,6 +1,6 @@
 # THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
 #
-# Generated on 2022-10-20T12:09:57Z by kres ef0ba25.
+# Generated on 2023-10-04T14:01:21Z by kres latest.
 
 codecov:
   require_ci_to_pass: false
@@ -9,7 +9,7 @@ coverage:
   status:
     project:
       default:
-        target: 50%
+        target: 10%
         threshold: 0.5%
         base: auto
         if_ci_failed: success

.github/workflows/ci.yaml

@@ -1,3 +1,7 @@
+# THIS FILE WAS AUTOMATICALLY GENERATED, PLEASE DO NOT EDIT.
+#
+# Generated on 2023-10-04T13:49:23Z by kres latest.
+
 name: default
 concurrency:
   group: ${{ github.event.label == null && github.head_ref || github.run_id }}
@@ -21,6 +25,7 @@ jobs:
     runs-on:
       - self-hosted
       - generic
+    if: (!startsWith(github.head_ref, 'renovate/') && !startsWith(github.head_ref, 'dependabot/'))
     services:
       buildkitd:
         image: moby/buildkit:v0.12.2
@@ -33,3 +38,44 @@ jobs:
     steps:
       - name: checkout
         uses: actions/checkout@v4
+      - name: Unshallow
+        run: |
+          git fetch --prune --unshallow
+      - name: Set up Docker Buildx
+        uses: docker/setup-buildx-action@v3
+        with:
+          driver: remote
+          endpoint: tcp://localhost:1234
+      - name: base
+        run: |
+          make base
+      - name: unit-tests
+        run: |
+          make unit-tests
+      - name: unit-tests-race
+        run: |
+          make unit-tests-race
+      - name: coverage
+        run: |
+          make coverage
+      - name: lint
+        run: |
+          make lint
+      - name: Generate Checksums
+        if: startsWith(github.ref, 'refs/tags/')
+        run: |
+          sha256sum _out/* > _out/sha256sum.txt
+          sha512sum _out/* > _out/sha512sum.txt
+      - name: release-notes
+        if: startsWith(github.ref, 'refs/tags/')
+        run: |
+          make release-notes
+      - name: Release
+        if: startsWith(github.ref, 'refs/tags/')
+        uses: crazy-max/ghaction-github-release@v2
+        with:
+          body_path: _out/RELEASE_NOTES.md
+          draft: "true"
+          files: |-
+            _out/*
+            _out/sha*.txt