Add secure Bird gateway for Pleno Control Plane (#332)

Add the Bird Control Plane gateway, signed webhook ingestion, policy-gated writes, fail-closed production auto-activation, and RSA-OAEP bootstrap credential flow.

scripts/php-ci-test.sh

@@ -149,6 +149,9 @@ tar \
   docker-compose.yml \
   docker-compose.example.yml \
   docker-compose.prod.standalone.yml \
+  scripts/bird-control-plane-auto-activate.php \
+  scripts/bird-control-plane-bootstrap-local.sh \
+  services/coolify/api/start.sh \
   services/php/Dockerfile \
   services/php/php-fpm-pool.conf \
   | docker compose $compose_files exec -T php1 tar --no-same-owner -C /var/www/repo-root -xf -