NetworkKeyAuthority
Establishes the proxy's network identity. The proxy is the authority: it owns the key and hands it to backends, rather than every component independently deriving one and hoping the results agree.
Resolution order:
- the persisted
network-keyfile — the steady state - a one-time seed from Floodgate's
key.pem, if present - a freshly minted key
The seed exists so an upgrade is invisible. Every network that works today derives its key from key.pem; seeding from the same file yields the same value, so a proxy that upgrades before its backends stays linked to them throughout the rollout. After the first boot the key is on disk and key.pem is never read again.
Unlike the previous implementation, a missing Floodgate file is not fatal. It never should have been: Floodgate is a Bedrock authentication plugin, and requiring it prevented Java-only networks from using RSPM's proxy features at all.
Deliberately logger-free so it stays platform-neutral and testable. The caller inspects Resolution and logs in its own platform's voice.