fix(hubble): integrate PD environment and bearer auth

[imbajin]

Summary

• provide one Codex development environment for Hubble with low-memory PD and HStore profiles
• run Hubble in the same Compose lifecycle with local Server and Hubble image overrides and pull disabled
• align PD discovery, Server registration, low-memory guard, admin password, and shared JWT configuration
• send Hubble JWT credentials with the standard Bearer scheme and preserve it for reused request clients
• verify the actual HugeClient authorization header sent to the Gremlin endpoint

This PR consolidates the former environment draft #21 and the Hubble authentication fix into one Toolchain delivery. #21 is closed.

Verification

• JDK 11 Hubble unit suite: 396 tests passed
• Toolchain environment contract suite: passed
• layered Compose config with local branch images and pull_policy never: passed
• Apache RAT for hubble-be: passed
• independent review/re-review of the original environment and auth changes: no actionable findings
• local Hubble branch image built as local/hugegraph-hubble:hubble-pd

Pending before ready

• clean-volume four-service Docker E2E requires local BuildKit cache cleanup; no image will be pushed

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: d8c3cc56-57dd-4aef-b316-258a9dd66ed9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch cx-hubble-pd-auth

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[imbajin]

Superseded by #23. The replacement branch has a clean history and intentionally excludes all .codex environment changes.