* feat(cli): support systemd socket activation
Serve the API from a single stream listener inherited through the systemd activation protocol while retaining the existing address bind path when no listener is provided. Validate activation metadata, preserve the public-bind safety check, and document an on-demand systemd setup.
Assisted-by: Codex:gpt-5
* fix(cli): satisfy listener cleanup lint
Make the best-effort close explicit so errcheck accepts the deferred systemd listener cleanup.
Assisted-by: Codex:gpt-5 [golangci-lint]
---------
Co-authored-by: localai-org-maint-bot <306269227+localai-org-maint-bot@users.noreply.github.com>