Lightweight containerized prosody tooling + moved auth scripts + xmpp reconnect/auth stabilization

utilities/prosody/auth_django.sh

@@ -0,0 +1,26 @@
+#!/bin/sh
+set -eu
+
+AUTH_PY_IN_CONTAINER="/code/utilities/prosody/auth_django.py"
+STACK_ID="${GIA_STACK_ID:-${STACK_ID:-}}"
+STACK_ID="$(echo "$STACK_ID" | tr -cs 'a-zA-Z0-9._-' '-' | sed 's/^-*//; s/-*$//')"
+if [ -n "$STACK_ID" ]; then
+  GIA_CONTAINER="gia_${STACK_ID}"
+else
+  GIA_CONTAINER="gia"
+fi
+
+# Prosody external auth uses line-oriented stdin/stdout.
+# We execute one short-lived auth check per line to avoid stale stdin issues
+# in long-lived `podman exec -i` sessions after disconnects/restarts.
+while IFS= read -r line; do
+  if [ -z "$line" ]; then
+    printf '0\n'
+    continue
+  fi
+  printf '%s\n' "$line" | podman exec -i "$GIA_CONTAINER" sh -lc '
+    cd /code &&
+    . /venv/bin/activate &&
+    exec python -u '"$AUTH_PY_IN_CONTAINER"' --once
+  '
+done