Retire live target apply CLI

[cbusillo]

Summary

• Retire the local environments apply-live-target mutation command and callback wiring.
• Keep the deployed service route and workflow as the supported path for live target runtime applies.
• Update docs and retirement notes so operators use POST /v1/live-target-runtime/apply or .github/workflows/live-target-runtime.yml.
• Preserve deploy coverage on the supported service route with a new FastAPI service test.

Refs #1322

Validation

• uv run python -m unittest tests.test_runtime_environments.RuntimeEnvironmentTests.test_environments_apply_live_target_command_is_retired tests.test_dokploy tests.test_service.LaunchplaneServiceTests.test_live_target_runtime_api_dry_run_returns_redacted_delta tests.test_service.LaunchplaneServiceTests.test_live_target_runtime_api_requires_expected_managed_secret_values tests.test_service.LaunchplaneServiceTests.test_live_target_runtime_api_apply_updates_env_and_verifies tests.test_service.LaunchplaneServiceTests.test_live_target_runtime_api_apply_can_trigger_deploy tests.test_service.LaunchplaneServiceTests.test_live_target_runtime_apply_requires_database_for_key_safety tests.test_service.LaunchplaneServiceTests.test_live_target_runtime_api_maps_runtime_key_safety_database_error tests.test_service.LaunchplaneServiceTests.test_live_target_runtime_api_apply_requires_apply_authorization
• uv run --extra dev ruff check control_plane/cli.py control_plane/cli_runtime_environments.py tests/test_dokploy.py tests/test_runtime_environments.py tests/test_service.py
• uv run --extra dev ruff format --check control_plane/cli.py control_plane/cli_runtime_environments.py tests/test_dokploy.py tests/test_runtime_environments.py tests/test_service.py
• uv run --extra dev mypy control_plane tests
• uv run python -m unittest
• uv run --extra dev ruff check .
• uv run launchplane service audit-config-authority --control-plane-root .
• git diff --check
• uv run /Users/cbusillo/Developer/codex-skills/jetbrains-inspection/scripts/jb-inspect.py closeout --repo "$PWD" --scope changed_files

Review

• Review agents code-gpt-5.5 and claude-sonnet-4.6: no blocking findings, ready to merge.