feat(sdk): add out of the box controls - part 1

[namrataghadi-galileo]

Summary

• Added Phase 1 out-of-box controls bootstrap tooling so startup can safely seed controls later without duplicating rows or blocking pod startup.
• Added evaluator gating, namespace-aware seeding, initial version creation, idempotency, duplicate-name race handling, and fail-open lifespan integration.

Scope

• User-facing/API changes: None.
• Internal changes: New agent_control_server.bootstrap module, startup seeding hook, and bootstrap tests.
• Out of scope: Actual OOTB control definitions, Phase 2 regex/json/list templates, and Phase 3 Luna metadata seeding.

Risk and Rollout

• Risk level: low
• Rollback plan: Remove the lifespan call to seed_out_of_box_controls and/or revert the bootstrap module and related tests.

Testing

• Added or updated automated tests
• Ran make check (not run because uv dependency resolution hit private index 401s)
• Manually verified behavior via targeted tests, server lint, and server mypy using the existing .venv

Checklist

• Linked issue/spec (Phase 1 from OOTB controls technical spec)
• Updated docs/examples for user-facing changes: N/A, no user-facing changes
• Included any required follow-up tasks in .md format: Phase 2 follow-up not yet added as a separate .md file

[codecov]

Codecov Report

❌ Patch coverage is 97.67442% with 3 lines in your changes missing coverage. Please review.

Files with missing lines	Patch %	Lines
...nt_control_server/bootstrap/out_of_box_controls.py	98.16%	2 Missing ⚠️
server/src/agent_control_server/main.py	90.90%	1 Missing ⚠️

📢 Thoughts on this report? Let us know!

[abhinav-galileo]

If you want to address this - #246 (comment)