fix: reuse existing secret-key on startup; add upstream sync workflow

[bighamx]

No description provided.

[gemini-code-assist]

Code Review

This pull request modifies the start_cliproxyapi and restart_cliproxyapi functions to attempt to retrieve an existing secret-key from the configuration before falling back to generating a random password. The review feedback correctly identifies that this logic is duplicated across both functions and suggests extracting it into a reusable helper function to adhere to DRY principles.

[bighamx]

Implemented the refactor suggestion by extracting the duplicated secret-key lookup/generation logic into a shared helper and reusing it in both start_cliproxyapi and restart_cliproxyapi.