refactor(gateway): split data-plane files into egress/supervisor/git_gate services

Group the gateway's data-plane modules into three service sub-packages
mirroring the host-side trio (bot_bottle.egress / .supervisor / .git_gate):

  gateway/egress/     addon_core, addon, dlp_config, dlp_detectors
  gateway/supervisor/ server            (was supervise_server)
  gateway/git_gate/   render, http_backend

Prefix-stripped filenames now that the package namespaces them; each
sub-package has a thin docstring __init__ (no eager imports, cheap leaf
loads). The two cross-cutting files stay at the gateway root:
policy_resolver (shared per-client lookup) and gateway_init, renamed to
bootstrap now that gateway/ already namespaces it.

Updated all importers (bot_bottle + tests), the in-VM/container `-m`
launch strings, the Dockerfile.gateway addon shim + ENTRYPOINT, and the
five gateway entries in scripts/critical-modules.txt. Full unit suite
green (2243).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

bot_bottle/git_gate/__init__.py

@@ -14,7 +14,7 @@ Layout:
     service delegates to.
 
 The rendering + the in-gateway hook execution live in
-`bot_bottle.gateway.git_gate_render`. The public names are re-exported lazily
+`bot_bottle.gateway.git_gate.render`. The public names are re-exported lazily
 via `__getattr__`, so `from bot_bottle.git_gate import …` keeps working and
 importing `git_gate.plan` (the contract's dependency) doesn't drag in the
 provisioning / forge-API code.
@@ -31,7 +31,7 @@ if TYPE_CHECKING:
         provision_git_gate_dynamic_keys,
         revoke_git_gate_provisioned_keys,
     )
-    from ..gateway.git_gate_render import (
+    from ..gateway.git_gate.render import (
         GIT_GATE_HOSTNAME,
         GIT_GATE_TIMEOUT_SECS,
         GitGateUpstream,
@@ -55,17 +55,17 @@ _LAZY: dict[str, str] = {
     "revoke_git_gate_provisioned_keys": ".provision",
     "_provision_dynamic_key": ".provision",
     "_resolve_identity_file": ".provision",
-    "GIT_GATE_HOSTNAME": "..gateway.git_gate_render",
-    "GIT_GATE_TIMEOUT_SECS": "..gateway.git_gate_render",
-    "GitGateUpstream": "..gateway.git_gate_render",
-    "git_gate_upstreams_for_bottle": "..gateway.git_gate_render",
-    "git_gate_render_gitconfig": "..gateway.git_gate_render",
-    "git_gate_known_hosts_line": "..gateway.git_gate_render",
-    "git_gate_render_entrypoint": "..gateway.git_gate_render",
-    "git_gate_render_provision": "..gateway.git_gate_render",
-    "git_gate_render_hook": "..gateway.git_gate_render",
-    "git_gate_render_access_hook": "..gateway.git_gate_render",
-    "_gitconfig_validate_value": "..gateway.git_gate_render",
+    "GIT_GATE_HOSTNAME": "..gateway.git_gate.render",
+    "GIT_GATE_TIMEOUT_SECS": "..gateway.git_gate.render",
+    "GitGateUpstream": "..gateway.git_gate.render",
+    "git_gate_upstreams_for_bottle": "..gateway.git_gate.render",
+    "git_gate_render_gitconfig": "..gateway.git_gate.render",
+    "git_gate_known_hosts_line": "..gateway.git_gate.render",
+    "git_gate_render_entrypoint": "..gateway.git_gate.render",
+    "git_gate_render_provision": "..gateway.git_gate.render",
+    "git_gate_render_hook": "..gateway.git_gate.render",
+    "git_gate_render_access_hook": "..gateway.git_gate.render",
+    "_gitconfig_validate_value": "..gateway.git_gate.render",
 }
 
 

bot_bottle/git_gate/plan.py

@@ -10,7 +10,7 @@ from __future__ import annotations
 from dataclasses import dataclass
 from pathlib import Path
 
-from ..gateway.git_gate_render import GitGateUpstream
+from ..gateway.git_gate.render import GitGateUpstream
 
 
 @dataclass(frozen=True)

bot_bottle/git_gate/provision.py

@@ -17,7 +17,7 @@ from ..bottle_state import globalize_slug
 from ..errors import MissingEnvVarError
 from ..log import info
 from ..manifest import ManifestBottle, ManifestGitEntry
-from ..gateway.git_gate_render import GitGateUpstream
+from ..gateway.git_gate.render import GitGateUpstream
 
 if TYPE_CHECKING:
     from .plan import GitGatePlan

bot_bottle/git_gate/service.py

@@ -8,7 +8,7 @@ upstream before fetches. The agent never sees the upstream credential.
 `GitGate` is the host-side service the backend drives at launch: build the plan
 (`prepare`), provision / revoke the per-upstream deploy keys, and preflight the
 upstream host keys. The rendering it emits + the in-gateway hook execution live
-in `bot_bottle.gateway.git_gate_render`.
+in `bot_bottle.gateway.git_gate.render`.
 """
 
 from __future__ import annotations
@@ -16,7 +16,7 @@ from __future__ import annotations
 from pathlib import Path
 
 from ..manifest import Manifest, ManifestBottle
-from ..gateway.git_gate_render import (
+from ..gateway.git_gate.render import (
     GitGateUpstream,
     git_gate_known_hosts_line,
     git_gate_render_access_hook,