feat(cloud): add edge host enrollment

apps/cloud-api/cloud_api/app.py

@@ -11,7 +11,12 @@ from fastapi import FastAPI, status
 from fastapi import Request
 from fastapi.responses import JSONResponse
 
-from cloud.auth import create_auth_provider
+from cloud.auth import (
+    ChainedAuthProvider,
+    ConfiguredEnrollmentTokenProvider,
+    RepositoryHostAuthProvider,
+    create_auth_provider,
+)
 from cloud.config import CloudConfig
 from cloud.control_config import (
     CloudControlConfig,
@@ -73,11 +78,20 @@ def create_app(
     control_config = config or load_control_config()
     validate_control_config(control_config)
     build_database = database_factory or _default_database_factory
-    auth_provider = create_auth_provider(
+    configured_auth_provider = create_auth_provider(
         control_config.credentials,
         allow_insecure_anonymous=control_config.allow_insecure_anonymous,
     )
     repository = _RepositoryProxy()
+    auth_provider = ChainedAuthProvider(
+        (
+            configured_auth_provider,
+            RepositoryHostAuthProvider(repository),  # type: ignore[arg-type]
+        )
+    )
+    enrollment_auth_provider = ConfiguredEnrollmentTokenProvider(
+        control_config.enrollment_credentials
+    )
     domain_config = CloudConfig(
         lease_duration_seconds=control_config.lease_duration_seconds,
     )
@@ -208,6 +222,7 @@ def create_app(
         create_internal_router(
             pool=pool,
             auth_provider=auth_provider,
+            enrollment_auth_provider=enrollment_auth_provider,
             lease_duration_seconds=control_config.lease_duration_seconds,
         )
     )