push ci run metrics to victoriametrics, with a grafana board

A swarm-ci-metrics host unit on a 5-minute timer lists every forge
repo's Actions runs as the new read-only ci-metrics account and pushes
each finished run's duration and queue wait over OTLP, stamped at the
run's stop time. The first pass backfills from run 1. swarm-controller
mints the account's token into bao and keeps a ci-metrics team with
read on the Actions unit in every organisation.

Closes #5376

swarm-controller/src/forge.rs

@@ -46,6 +46,7 @@ use swarm_queue_client::stored_secret::StoredSecret;
 pub mod agent_token;
 mod api;
 pub mod builder_account;
+pub mod ci_metrics_account;
 pub mod classifier_account;
 pub mod docs_grant;
 pub mod hive_token;