automation_helper: fix unix sock file permission

Set the file permission of the socket generated by gunicorn to
umask=0077. This gives all permissions to the user and no permissions to
group or other. This is the same permission set for the dcd.sock.

In addition, we need to register the automation-helper as a new init
script so that the integration tests pass.

Change-Id: I9df96487a265be80ab104072efecb3ad39d59fff

cmk/base/automation_helper.py

@@ -61,6 +61,7 @@ def __init__(self, app: FastAPI, cfg: ApplicationServerConfig) -> None:
         self._app = app
         self._options = {
             "daemon": cfg.daemon,
+            "umask": 0o077,
             "bind": APPLICATION_SOCKET,
             "workers": APPLICATION_WORKER_COUNT,
             "worker_class": APPLICATION_WORKER_CLASS,

tests/integration/omd/test_init_scripts.py

@@ -10,6 +10,7 @@ def test_init_scripts(site: Site) -> None:
     scripts = {
         "agent-receiver",
         "apache",
+        "automation-helper",
         "cmk-ui-jobs",
         "core",
         "crontab",