Migrate to V2 metal-apiserver with backwards compatibility.

[Gerrit91]

Description

Inspired from #36 but maintaining the old information for current metal-hammer versions.

Depends on:

• Add infra endpoint to issue machine tokens for metal-hammer. api#194

Here is the output of the future metal-hammer endpoint. We can clean up the old endpoint after the migration:

root@mgmtserver01:~# curl http://<mgmtserver>:4242/config/fab45c59-dcf9-4954-bab1-b024ba6bbdc7
{
  "client": {
    "metal_apiserver_url": "...",
    "metal_hammer_token": "<see-contents-below>"
  },
  "partition": "...",
  "logging": {
    "endpoint": "...",
    "certificate_auth": {
      "cert": "...",
      "key": "..."
    },
    "log_type": "loki"
  }
}

Decoded JWT:

{
    "aud": [
        "..."
    ],
    "exp": 1790597281,
    "iat": 1790338081,
    "iss": "...",
    "jti": "01a0d877-234a-70dd-b117-3864e32b94e0",
    "nbf": 1790338081,
    "sub": "01a0d225-fde5-7609-a0fc-241b177eaf41",
    "type": "TOKEN_TYPE_API"
}

❯ metalctlv2 admin token describe 01a0d877-234a-70dd-b117-3864e32b94e0 
uuid: 01a0d877-234a-70dd-b117-3864e32b94e0
user: 01a0d225-fde5-7609-a0fc-241b177eaf41
meta:
    createdAt: "2026-09-25T12:08:01.610053141Z"
description: machine token for 00000000-0000-0000-0000-7cc2555422c0
expires: "2026-09-28T12:08:01.610053141Z"
issuedAt: "2026-09-25T12:08:01.610053141Z"
tokenType: TOKEN_TYPE_API
machineRoles:
    fab45c59-dcf9-4954-bab1-b024ba6bbdc7: MACHINE_ROLE_EDITOR

Used AI-Tools ✨

• None used for generation

[mwennrich]

FYI: current main is broken for some machinetypes (#47)

[Gerrit91]

FYI: current main is broken for some machinetypes (#47)

Now fixed with #48. So this one should also be good to go.

[iljarotar]

Looks good to me. Only minor remarks.