feat(repo): missing $type? invent one

Allow remote delegation controllers on invite-only servers

feat(repo): missing $type? invent one

feat(nix): ensure that tranquil-store path is always writable by the service user just like file blob storage

docs: nel interjection: be right, be good, be fun

feat(test): test that websockets get closed

fix(ci): use kaniko to build

feat(tranquil-store): gc and hardening

fix(auth): keep lxm optional and dont default to * when no lxm is given in getServiceAuth

fix(pds): do service identifier resolution for proxying correctly