add in cookie test

feat(test): test that websockets get closed

fix(ci): use kaniko to build

feat(tranquil-store): gc and hardening

fix(auth): keep lxm optional and dont default to * when no lxm is given in getServiceAuth

fix(pds): do service identifier resolution for proxying correctly