feat: use JWT ticket to avoid DB queries on apps (#6148)

Issue a JWT ticket on the first request with a short expiry that
contains details about which workspace/agent/app combo the ticket is
valid for.

coderd/database/lock.go

@@ -0,0 +1,8 @@
+package database
+
+// Well-known lock IDs for lock functions in the database. These should not
+// change. If locks are deprecated, they should be kept to avoid reusing the
+// same ID.
+const (
+	LockIDDeploymentSetup = iota + 1
+)