Upload key package before publishing identity updates

[neekolas]

TL;DR

Implements parts of xmtp/xmtp-node-go#399

• Uses UploadKeyPackage instead of RegisterInstallation so we can deprecate the register installation endpoint
• Uploads key package before publishing the identity updates for new installations. This ensures that any installation seen in an identity update must have a matching key package.
• No longer checks the lifetime of key packages when verifying

AI Assisted Summary

What changed?

• Removed expiration checks and set expiration to 0 in MLS validation service
• Updated the client registration process to register identity before applying signature request
• Renamed register_installation to upload_key_package in API client calls
• Removed lifetime validity checks from key package verification

[neekolas]

• Stop setting new lifetimes #964
• Remove dead endpoints #963
• Upload key package before publishing identity updates #962 👈
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

Join @neekolas and the rest of your teammates on Graphite

[neekolas]

I'm not so worried about removing these checks, since no key packages are more than a few months old. They all have 6 month expirations, so none will be expired until long after this code is widely deployed.

[neekolas]

Merge activity

• Aug 14, 5:32 PM PDT: @neekolas started a stack merge that includes this pull request via Graphite.
• Aug 14, 5:33 PM PDT: @neekolas merged this pull request with Graphite.
• Aug 27, 10:34 AM PDT: @neekolas started a stack merge that includes this pull request via Graphite.