Add device enrollment API and agent protocol

Expose ITAM REST endpoints for agents, console GraphQL for device
management, and wire probod bootstrap with enrollment e2e coverage.

Signed-off-by: Ludovic Vielle <ludovic@probo.com>

pkg/server/api/console/v1/resolver.go

@@ -45,6 +45,7 @@ import (
 	"go.probo.inc/probo/pkg/filemanager"
 	"go.probo.inc/probo/pkg/gid"
 	"go.probo.inc/probo/pkg/iam"
+	"go.probo.inc/probo/pkg/itam"
 	"go.probo.inc/probo/pkg/mailman"
 	"go.probo.inc/probo/pkg/probo"
 	"go.probo.inc/probo/pkg/resourcealias"
@@ -77,6 +78,7 @@ type (
 		providerRegistry  *provider.Registry
 		riskManagement    *riskmanagement.Service
 		thirdParty        *thirdparty.Service
+		itam              *itam.Service
 		logger            *log.Logger
 		fileManager       *filemanager.Service
 		baseURL           *baseurl.BaseURL
@@ -107,6 +109,7 @@ func NewMux(
 	thirdPartySvc *thirdparty.Service,
 	riskManagementSvc *riskmanagement.Service,
 	graphqlLimits gqlutils.Limits,
+	itamSvc *itam.Service,
 ) *chi.Mux {
 	r := chi.NewMux()
 
@@ -133,6 +136,7 @@ func NewMux(
 		fileManagerSvc,
 		baseURL,
 		graphqlLimits,
+		itamSvc,
 	)
 
 	r.Group(func(r chi.Router) {
@@ -506,5 +510,6 @@ func isValidPagerDutySubdomain(s string) bool {
 
 func (r *Resolver) Permission(ctx context.Context, obj types.Node, action string) (bool, error) {
 	_, err := r.authorize(ctx, obj.GetID(), action, authz.WithDryRun())
+
 	return err == nil, nil
 }