[self-host] build keybroker generate_key into the backend binary (#33…

…844)

add an extra binary to the self-hosted backend container, so you can

```
docker exec convex-backend ./generate_key $INSTANCE_NAME $INSTANCE_SECRET
```

to create new API keys.

Or if the container isn't running,

```
docker run --rm --entrypoint ./generate_key ghcr.io/get-convex/self-hosted-backend:latest $INSTANCE_NAME $INSTANCE_SECRET
```

GitOrigin-RevId: 04ffcf2bb00f7c4a9b4a16e5ebd9b1e9595d0bf4

self-hosted/Dockerfile.backend

@@ -75,9 +75,11 @@ COPY . .
 RUN --mount=type=cache,target=/convex/npm-packages/common/temp/,sharing=locked --mount=type=cache,target=/convex/target/ --mount=type=cache,target=/usr/local/cargo/git/db --mount=type=cache,target=/usr/local/cargo/registry/ <<EOF
 cargo build --release -p local_backend --bin convex-local-backend
 cp target/release/convex-local-backend .
+cargo build --release -p keybroker --bin generate_key
+cp target/release/generate_key .
 EOF
 ARG debug
-RUN if [[ -z "$debug" ]]; then strip ./convex-local-backend; fi
+RUN if [[ -z "$debug" ]]; then strip ./convex-local-backend; strip ./generate_key; fi
 
 # Final stage: Creates minimal runtime image with only necessary components
 # Uses Ubuntu Noble (24.04) as the base image
@@ -102,12 +104,9 @@ RUN ln -sf /usr/lib/node_modules/npm/bin/npm-cli.js /usr/bin/npm && \
 RUN ln -sf /usr/lib/node_modules/npm/bin/npx-cli.js /usr/bin/npx && \
     chmod +x /usr/bin/npx
 COPY --from=build --chmod=744 /convex/convex-local-backend .
+COPY --from=build --chmod=744 /convex/generate_key .
 COPY --chmod=744 self-hosted/run_backend.sh .
 
-
-RUN chmod +x convex-local-backend
-RUN chmod +x run_backend.sh
-
 VOLUME /convex/data
 
 # Set the backend as the executable

self-hosted/docker-compose.yml

@@ -18,8 +18,9 @@ services:
       - CONVEX_SITE_ORIGIN=${URL_BASE}:${SITE_PROXY_PORT}
       - PORT=${PORT}
       - SITE_PROXY_PORT=${SITE_PROXY_PORT}
+    container_name: convex-local-backend
     healthcheck:
-      test: curl -f http://localhost:3210/version
+      test: curl -f http://localhost:$${PORT}/version
       interval: 5s
       start_period: 5s