Merge pull request #275 from alpacax/274-refactor-extract-syncer-package-and-implement-lightweight-commit-with-deferred-sync

feat: add 0-5s jitter before priority sync for IaC load distribution

feat: sync users/groups immediately after lightweight commit

fix: fall back to full commit when essential data collection fails

docs: clarify minDeferredSyncJitterSeconds is a tradeoff

fix: check context before lightweight commit on shutdown

fix: address Copilot review feedback

test: add tests for lightweight commit and FK ordering

feat: implement lightweight commit with deferred sync

fix: reorder syncers to satisfy server-side FK constraints

Merge pull request #271 from alpacax/feature/key-id-based-public-key-lookup

docs(signing): add note about extending ResolveAuthEnv for new environments

Merge pull request #273 from alpacax/272-fix-migrate-binary-install-path-to-usrbin-and-unify-log-paths

fix: remove dead code in cleanup_old_binary

fix: make cleanup_old_binary non-fatal under set -e