pub fn run_cli(args: &[String]) -> Option<i32>
CLI dispatch: handles --gen-key / --revoke-key if present, returning the exit code; None = no key-management args, boot the server normally.
--gen-key
--revoke-key