#1183 Add safe adoption and lifecycle methods for existing Hetzner resources

Please add first-class adoption for existing servers, primary IPs, firewalls, and SSH keys with expected-identity validation; change_protection methods for servers and primary IPs; and firewall rule/attachment reconciliation. The current get method can seed state but does not validate identity, server/primary-IP protection is not exposed, and firewall update only changes name/labels. These gaps make a safe OpenTofu-to-Swamp migration impossible without local type extensions, especially for grandfathered servers that must never be recreated.

Upstream repository: https://github.com/swamp-club/swamp-extensions

Environment

• Extension: @swamp/hetzner-cloud@2026.07.02.1
• swamp: 20260707.035329.0-sha.84dbdd93
• OS: linux (x86_64)
• Deno: 2.8.3
• Shell: /usr/bin/bash