cmd/headscale/cli: add grpcRun wrapper for gRPC client lifecycle

Add a grpcRun helper that wraps cobra RunFuncs, injecting a ready
gRPC client and context. The connection lifecycle (cancel, close)
is managed by the wrapper, eliminating the duplicated 3-line
boilerplate (newHeadscaleCLIWithConfig + defer cancel + defer
conn.Close) from 22 command handlers across 7 files.

Three call sites are intentionally left unconverted:
- backfillNodeIPsCmd: creates the client only after user confirmation
- getPolicy/setPolicy: conditionally use gRPC vs direct DB access

cmd/headscale/cli/api_key.go

@@ -1,6 +1,7 @@
 package cli
 
 import (
+	"context"
 	"fmt"
 	"strconv"
 	"time"
@@ -46,13 +47,9 @@ var listAPIKeys = &cobra.Command{
 	Use:     "list",
 	Short:   "List the Api keys for headscale",
 	Aliases: []string{"ls", "show"},
-	Run: func(cmd *cobra.Command, args []string) {
+	Run: grpcRun(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) {
 		output, _ := cmd.Flags().GetString("output")
 
-		ctx, client, conn, cancel := newHeadscaleCLIWithConfig()
-		defer cancel()
-		defer conn.Close()
-
 		request := &v1.ListApiKeysRequest{}
 
 		response, err := client.ListApiKeys(ctx, request)
@@ -95,7 +92,7 @@ var listAPIKeys = &cobra.Command{
 				output,
 			)
 		}
-	},
+	}),
 }
 
 var createAPIKeyCmd = &cobra.Command{
@@ -106,7 +103,7 @@ Creates a new Api key, the Api key is only visible on creation
 and cannot be retrieved again.
 If you loose a key, create a new one and revoke (expire) the old one.`,
 	Aliases: []string{"c", "new"},
-	Run: func(cmd *cobra.Command, args []string) {
+	Run: grpcRun(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) {
 		output, _ := cmd.Flags().GetString("output")
 
 		request := &v1.CreateApiKeyRequest{}
@@ -126,10 +123,6 @@ If you loose a key, create a new one and revoke (expire) the old one.`,
 
 		request.Expiration = timestamppb.New(expiration)
 
-		ctx, client, conn, cancel := newHeadscaleCLIWithConfig()
-		defer cancel()
-		defer conn.Close()
-
 		response, err := client.CreateApiKey(ctx, request)
 		if err != nil {
 			ErrorOutput(
@@ -140,14 +133,14 @@ If you loose a key, create a new one and revoke (expire) the old one.`,
 		}
 
 		SuccessOutput(response.GetApiKey(), response.GetApiKey(), output)
-	},
+	}),
 }
 
 var expireAPIKeyCmd = &cobra.Command{
 	Use:     "expire",
 	Short:   "Expire an ApiKey",
 	Aliases: []string{"revoke", "exp", "e"},
-	Run: func(cmd *cobra.Command, args []string) {
+	Run: grpcRun(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) {
 		output, _ := cmd.Flags().GetString("output")
 
 		id, _ := cmd.Flags().GetUint64("id")
@@ -168,10 +161,6 @@ var expireAPIKeyCmd = &cobra.Command{
 			)
 		}
 
-		ctx, client, conn, cancel := newHeadscaleCLIWithConfig()
-		defer cancel()
-		defer conn.Close()
-
 		request := &v1.ExpireApiKeyRequest{}
 		if id != 0 {
 			request.Id = id
@@ -189,14 +178,14 @@ var expireAPIKeyCmd = &cobra.Command{
 		}
 
 		SuccessOutput(response, "Key expired", output)
-	},
+	}),
 }
 
 var deleteAPIKeyCmd = &cobra.Command{
 	Use:     "delete",
 	Short:   "Delete an ApiKey",
 	Aliases: []string{"remove", "del"},
-	Run: func(cmd *cobra.Command, args []string) {
+	Run: grpcRun(func(ctx context.Context, client v1.HeadscaleServiceClient, cmd *cobra.Command, args []string) {
 		output, _ := cmd.Flags().GetString("output")
 
 		id, _ := cmd.Flags().GetUint64("id")
@@ -217,10 +206,6 @@ var deleteAPIKeyCmd = &cobra.Command{
 			)
 		}
 
-		ctx, client, conn, cancel := newHeadscaleCLIWithConfig()
-		defer cancel()
-		defer conn.Close()
-
 		request := &v1.DeleteApiKeyRequest{}
 		if id != 0 {
 			request.Id = id
@@ -238,5 +223,5 @@ var deleteAPIKeyCmd = &cobra.Command{
 		}
 
 		SuccessOutput(response, "Key deleted", output)
-	},
+	}),
 }