Adds basic federation status health check

[jsnctl]

This PR adds a simple check for a given Federation pair, ensuring equality between the bundles on both sides. For each trust zone it will:

• Query the SPIRE server for the "server CA bundle" of the host trust zone (i.e. runs /opt/spire/bin/spire-server bundle show)
• Query the SPIRE server for any federated trust domain bundles (i.e runs /opt/spire/bin/spire-server bundle list)
• Format and store (in memory) the results in string format
• Compare the requisite values to each side of the federation, returning "Healthy" if equal but "Unhealthy" otherwise

Note this currently relies on a bump to go 1.23 to make use of slices.Chunk

This might not be the full story for federation health. We could feasibly check:

• ClusterFederatedTrustDomain entries on both sides
• ClusterSPIFFEID FederatesWith values on both sides (although we'd need to specify which ones to check, perhaps via bound attestation-policy entries?)
• Something like the attest-me pattern as mooted in previous discussions

[jsnctl]

Seems to work pretty well

💤 cofidectl/ ./cofidectl federation list                                                                                          (jsnctl/federation-status)
  FROM TRUST ZONE | TO TRUST ZONE | STATUS   
------------------+---------------+----------
  alpha           | beta          | Healthy  
  beta            | alpha         | Healthy  
💤 cofidectl/ rprompt                                                                                                              (jsnctl/federation-status)
💤 cofidectl/ k delete clusterfederatedtrustdomains.spire.spiffe.io spire-spire-alpha                                                    ⎈(kind-beta/default)
clusterfederatedtrustdomain.spire.spiffe.io "spire-spire-alpha" deleted
💤 cofidectl/ k exec -n spire spire-server-0 -- /opt/spire/bin/spire-server bundle delete -id alpha.test                                 ⎈(kind-beta/default)



bundle deleted.
💤 cofidectl/ ./cofidectl federation list                                                                                                ⎈(kind-beta/default)
  FROM TRUST ZONE | TO TRUST ZONE |  STATUS    
------------------+---------------+------------
  alpha           | beta          | Unhealthy  
  beta            | alpha         | Unhealthy  

[markgoddard]

It might also be nice to add the federation list command to the federation integration test.

[jsnctl]

Added this post deploy fn as it feels like we might add to these sorts of post-deploy commands down the line

cofidectl/tests/integration/federation/test.sh

Lines 81 to 86 in 49fecb2

	function post_deploy() {
	if ./cofidectl federation list | grep Healthy; then
	return
	fi
	exit 1
	}