Remove stale Puppet development environments automatically

As a follow-up to the discussion around the possibility to allow agents to switch environments (#41991 - closed) we agreed it's desireable for stale environments to be automatically removed from the Puppet server, as a security enhancement.

added Puppet label

marked this issue as related to #41991 (closed)

changed milestone to %Puppet CI

mentioned in issue #41991 (closed)

assigned to @anarcat

added Doing label

see https://gitlab.torproject.org/tpo/tpa/puppet-control/-/merge_requests/8 for next steps

added Needs Review label and removed Doing label

a script implementing this was merged in puppet-control!8, but not deployed in production. i need everyone to agree that we actually want this before putting it in production, and that's happening in https://gitlab.torproject.org/tpo/tpa/puppet-control/-/merge_requests/9

this was deployed to production.

closed