feat: use JWT ticket to avoid DB queries on apps (#6148)

Issue a JWT ticket on the first request with a short expiry that
contains details about which workspace/agent/app combo the ticket is
valid for.

coderd/database/queries/lock.sql

@@ -0,0 +1,17 @@
+-- name: AcquireLock :exec
+-- Blocks until the lock is acquired.
+--
+-- This must be called from within a transaction. The lock will be automatically
+-- released when the transaction ends.
+--
+-- Use database.LockID() to generate a unique lock ID from a string.
+SELECT pg_advisory_xact_lock($1);
+
+-- name: TryAcquireLock :one
+-- Non blocking lock. Returns true if the lock was acquired, false otherwise.
+--
+-- This must be called from within a transaction. The lock will be automatically
+-- released when the transaction ends.
+--
+-- Use database.LockID() to generate a unique lock ID from a string.
+SELECT pg_try_advisory_xact_lock($1);