feat(http-tracker): [#2289] migrate HTTP tracker to token lifecycle

[josecelano]

Closes #2289

Summary

• Add an additive token-aware HTTP server lifecycle that retains the Axum drain-controller handle.
• Derive one child cancellation token per configured HTTP tracker instance and join server and controller children on every component terminal path.
• Preserve the legacy HTTP start/stop API and add deterministic lifecycle, bootstrap propagation, and ownership tests.
• Record direct tracker PID SIGTERM, listener-rebind, verification, retrospective, and independent-review evidence.

Validation

• linter all
• cargo test -p torrust-tracker-axum-http-server
• cargo test -p torrust-tracker
• TORRUST_GIT_HOOKS_LOG_DIR=.tmp ./contrib/dev-tools/git/hooks/pre-commit.sh
• TORRUST_GIT_HOOKS_LOG_DIR=.tmp ./contrib/dev-tools/git/hooks/pre-push.sh
• Direct target/debug/torrust-tracker PID SIGTERM twice: both exited 0, logged the token-aware HTTP drain, and rebound the HTTP listener.

[Copilot]

Warning

Copilot couldn't run its full agentic review because it didn't start before the timeout. Make sure your repository has a runner available, or add a copilot-code-review.yml file specifying one with the runs-on attribute. See the docs for more details.

Copilot review overview

Review effort: Lite
Findings: 4 · 1

Open (5)

• On registration failure, this awaits both the server task and drain controller to completion.… · New
• In start_token_aware_runtime, the start-notification oneshot is sent and awaited within the same… · New
• In start_token_aware_runtime, the start-notification oneshot is sent and awaited within the same… · New
• In start_token_aware_runtime, the start-notification oneshot is sent and awaited within the same… · New
• The 90-second graceful-drain timeout is a magic constant in the token-aware path. To keep behavior… · New

What changed in this PR

This PR migrates the HTTP tracker bootstrap/runtime to a token-driven lifecycle, ensuring the Axum drain controller is retained and joined deterministically while keeping the legacy start/stop API intact.

Changes:

• Introduces TokenAwareServerTask to own and abort/join both the server task and its drain controller.
• Adds a token-aware HttpServer::start_with_cancellation path returning both runtime and shutdown-controller handles.
• Expands tests across bootstrap + HTTP server crates to validate cancellation, independent completion/failure, and bootstrap propagation.

File	Description
src/​bootstrap/​jobs/​manager.rs	Adds TokenAwareServerTask to encapsulate server + controller ownership.
src/​bootstrap/​jobs/​http_tracker.rs	Switches HTTP tracker job to token-aware server start and supervises both task handles; adds lifecycle tests.
src/​app.rs	Passes a per-instance child cancellation token into HTTP tracker bootstrap; adds propagation test.
packages/​axum-http-server/​src/​server.rs	Adds token-aware server start returning task + drain-controller handles; refactors server future creation; adds tests.
docs/​issues/​open/​2289-1488-si-11-migrate-http-tracker-token-lifecycle/​*.md	Updates verification/retrospective/evidence documents for the migration.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[josecelano]

ACK 5de3875