feat: ship single-file run distribution and list key reset

Compile-time run auth replaces zip sidecars, lengthens run keys, revokes
active sessions on reset, and exposes run-key reset in the server list.

platform/dto/job_channel.go

@@ -153,6 +153,7 @@ type DistributionBuildInputResponse struct {
 	TargetOS         string `json:"targetOs"`
 	TargetArch       string `json:"targetArch"`
 	TargetRelease    string `json:"targetRelease"`
+	PlatformURL      string `json:"platformUrl,omitempty"`
 	PackageFormat    string `json:"packageFormat"`
 	RepositoryURL    string `json:"repositoryUrl,omitempty"`
 	SourceRevision   string `json:"sourceRevision,omitempty"`
@@ -468,6 +469,7 @@ func DistributionBuildInputFromDomain(input domain.DistributionBuildInput) Distr
 		TargetOS:         input.TargetOS,
 		TargetArch:       input.TargetArch,
 		TargetRelease:    input.TargetRelease,
+		PlatformURL:      input.PlatformURL,
 		PackageFormat:    input.PackageFormat,
 		RepositoryURL:    input.RepositoryURL,
 		SourceRevision:   input.SourceRevision,