Add ePDS-native pdsadmin CLI

[daveselfsurf]

Summary

Adds an ePDS-native pdsadmin CLI under scripts/pdsadmin/, so operators get the familiar Bluesky pdsadmin admin commands against an ePDS deployment. The upstream Bluesky script isn't bundled with ePDS and assumes the /pds docker-compose layout (/pds/pds.env, a pds container, systemd update), so running ./pdsadmin … on an ePDS box fails with command not found.

• account list [--limit N] — reads the pds-core account DB directly (actor joined with account), read-only and WAL-safe, ordered by actor.createdAt newest-first. This is deliberately not com.atproto.sync.listRepos, which inner-joins repo_root and filters by account status (so it omits repo-less / deactivated accounts) and only exposes a re-index indexedAt rather than creation time. Surfaces a Deactivated column.
• account create / delete / takedown / untakedown / reset-password, create-invite-code [useCount], request-crawl [relay] — authenticated XRPC calls.
• Reads PDS_HOSTNAME / PDS_ADMIN_PASSWORD from PDS_ENV_FILE (default /opt/epds/.env; override for local/dev). account list additionally needs Docker access (run with sudo); container/DB path overridable via PDS_CORE_CONTAINER / PDS_ACCOUNT_DB.
• The upstream update subcommand is intentionally omitted — it pulls Bluesky's image and restarts via systemd, which would break ePDS's docker compose build/up flow.

Because it depends only on stable AT Protocol lexicon endpoints / the account DB schema plus two core env vars (not on package code), it keeps working across future repo changes.

Test plan

• account list --limit 10 on the self.surf deploy returns the genuine newest accounts (top row matches actor.createdAt from a direct DB query), correctly aligned.
• Arg validation: bad --limit rejected before any I/O; bad DIDs rejected for delete/takedown/etc.
• Env guards: missing env file / missing PDS_HOSTNAME/PDS_ADMIN_PASSWORD error clearly.
• help renders; unknown commands fall back to help.
• Reviewer: confirm account create mirroring upstream (random password, bypasses ePDS OTP/community-DID provisioning) is acceptable, or should be dropped.

Usage on the server:

sudo /opt/epds/scripts/pdsadmin/pdsadmin.sh account list --limit 10

🤖 Generated with Claude Code