feat(core): Lets key manager factory take context

[dmihalcik-virtru]

Proposed Changes

• Some of our newer KMS implementations do some health checks and other things during their init phase.
• This was always intended as an option for the init, so we always should have allowed passing in a context
• I made this an explicit parameter to satisfy the golang linter that prevents context from being a parameter (in KeyManagerFactoryOptions
• This means we need to have new types for a lot of things
• and to avoid breaking changes while downstream service implementations pick this up, this implements bidirectional compatibility, upgrading factories that don't take context to ignore it, and downgrading services that don't set it to use Background context

Checklist

• I have added or updated unit tests
• I have added or updated integration tests (if appropriate)
• I have added or updated documentation

Testing Instructions

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	183.034325ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	97.433825ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	362.561514ms
Throughput	275.82 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	37.903096114s
Average Latency	377.577669ms
Throughput	131.92 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	26.30867758s
Average Latency	262.087075ms
Throughput	190.05 requests/second

[Copilot]

Pull Request Overview

This PR adds context support to key manager factories to enable health checks and other initialization operations that require context. The changes implement bidirectional compatibility by introducing new context-aware interfaces while maintaining backward compatibility with existing implementations.

Key changes:

• Introduces KeyManagerFactoryCtx type and NamedKeyManagerCtxFactory struct for context-aware key manager creation
• Updates DelegatingKeyService to use context-aware factories internally while providing compatibility shims
• Modifies service registration and startup flow to pass both legacy and context-aware factory types

Reviewed Changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
service/trust/key_manager.go	Adds new NamedKeyManagerCtxFactory struct for context-aware factories
service/trust/delegating_key_service.go	Updates core delegation logic to use context-aware factories with backward compatibility
service/pkg/serviceregistry/serviceregistry.go	Adds KeyManagerCtxFactories field to registration parameters
service/pkg/server/start_test.go	Updates test to use new context-aware factory parameter names
service/pkg/server/start.go	Updates server startup to pass context-aware factories
service/pkg/server/services_test.go	Removes unused import and updates test parameter structure
service/pkg/server/services.go	Implements bidirectional compatibility between legacy and context-aware factories
service/pkg/server/options.go	Adds new option functions for context-aware factories with legacy compatibility

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	173.561182ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	97.188558ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	353.922974ms
Throughput	282.55 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	37.409766216s
Average Latency	372.411712ms
Throughput	133.65 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	26.490312322s
Average Latency	263.941364ms
Throughput	188.75 requests/second

[jrschumacher]

@dmihalcik-virtru I talked with @strantalis and this is currently experimental so we don't need to deprecate. Can we add an // Experimental comment and remove the deprecation?

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	175.473606ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	95.473775ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	347.756601ms
Throughput	287.56 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	36.804767845s
Average Latency	365.702495ms
Throughput	135.85 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	25.90737268s
Average Latency	258.379238ms
Throughput	193.00 requests/second

[github-actions]

Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	177.26069ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric	Value
Approved Decision Requests	1000
Denied Decision Requests	0
Total Time	97.345612ms

Standard Benchmark Metrics Skipped or Failed

Bulk Benchmark Results

Metric	Value
Total Decrypts	100
Successful Decrypts	100
Failed Decrypts	0
Total Time	339.91916ms
Throughput	294.19 requests/second

TDF3 Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	37.317888558s
Average Latency	371.559469ms
Throughput	133.98 requests/second

NANOTDF Benchmark Results:

Metric	Value
Total Requests	5000
Successful Requests	5000
Failed Requests	0
Concurrent Requests	50
Total Time	25.898667603s
Average Latency	257.748781ms
Throughput	193.06 requests/second