appview/{pulls,repo,state}: use xrpc + service auth for knot requests
This now covers: Fork, ForkSync, NewHiddenRef, Merge, MergeCheck,
and RepoCreate/Delete.
Signed-off-by: Anirudh Oppiliappan <anirudh@tangled.sh>
authored by