- loadCodeApiKey: load CODE_API_KEY once per request, pass to both
checkSessionsAlive and provisionToCodeEnv (was N+1 lookups)
- provisionToCodeEnv/provisionToVectorDB now return fileUpdate objects
instead of writing to DB immediately
- primeResources batches all DB updates via Promise.allSettled after
provisioning completes
- Remove updateFile import from provision.js (no longer writes directly)