feat(e2b): add dimension-aware API key quota

[AiRanthem]

Summary

• add API-key quota modeling for sandbox count plus CPU and memory dimensions
• enforce quota admission and release in the E2B create/clone flows with Redis-backed live-set tracking
• add cache health, leader lifecycle, anti-drift reconciliation, storage, config, and documentation updates

Impact

This lets sandbox-manager reject over-quota API key usage before creating new sandbox resources, while keeping the quota implementation scoped to the E2B API and sandbox-manager layers.

Validation

• GOCACHE=/private/tmp/go-build-cache /Users/sophon/Bin/go test ./pkg/cache ./pkg/sandbox-manager ./pkg/sandbox-manager/infra/sandboxcr ./pkg/servers/e2b ./pkg/servers/e2b/keys ./pkg/servers/e2b/models ./pkg/servers/e2b/quota

[kruise-bot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign furykerry for approval by writing /assign @furykerry in a comment. For more information see:The Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[codecov]

Codecov Report

❌ Patch coverage is 77.25118% with 384 lines in your changes missing coverage. Please review.
✅ Project coverage is 79.83%. Comparing base (f67661d) to head (4aa48fe).
⚠️ Report is 5 commits behind head on master.

Files with missing lines	Patch %	Lines
pkg/sandbox-manager/quota/antidrift.go	82.45%	39 Missing and 24 partials ⚠️
pkg/sandbox-manager/leader.go	61.15%	46 Missing and 8 partials ⚠️
pkg/cache/cache.go	46.66%	37 Missing and 3 partials ⚠️
pkg/sandbox-manager/core.go	54.54%	32 Missing and 8 partials ⚠️
pkg/sandbox-manager/quota/redis.go	71.53%	19 Missing and 18 partials ⚠️
...kg/sandbox-manager/infra/sandboxcr/quota_source.go	57.89%	28 Missing and 4 partials ⚠️
pkg/servers/e2b/core.go	37.03%	15 Missing and 2 partials ⚠️
pkg/servers/e2b/keys/mysql.go	79.22%	8 Missing and 8 partials ⚠️
pkg/sandbox-manager/quota/antidrift_events.go	65.85%	7 Missing and 7 partials ⚠️
pkg/sandbox-manager/api.go	80.00%	8 Missing and 4 partials ⚠️
... and 12 more

Additional details and impacted files

@@            Coverage Diff             @@
##           master     #565      +/-   ##
==========================================
+ Coverage   79.71%   79.83%   +0.12%     
==========================================
  Files         205      225      +20     
  Lines       15287    17518    +2231     
==========================================
+ Hits        12186    13986    +1800     
- Misses       2658     2957     +299     
- Partials      443      575     +132     

Flag	Coverage Δ
unittests	79.83% <77.25%> (+0.12%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.