GeezerVison

Fixes #4385

When a gateway loses its state, for example after a Kubernetes gateway container restarts on a
fresh filesystem, the running-replica sync registers its services again but never resends the
global config. certbot then requests their certificates from its default ACME server instead of
DSTACK_ACME_SERVER, without the EAB credentials.

The sync now calls submit_gateway_config() before registering services, only on ticks that
register something. If the call fails, the tick skips the sync and retries on the next one,
rather than request a certificate from the wrong server.

Testing:

• uv run pytest src/tests/_internal/server/background/pipeline_tasks/test_gateway_replicas.py:
  74 passed, 74 skipped (the skipped ones are the Postgres variants, run with --runpostgres).
• test_registers_new_service_and_replica now checks that the config is submitted before
  register_service.
• test_no_gateway_calls_when_state_already_in_sync now checks that no config is submitted
  when there is nothing to register.
• The new test_skips_registration_if_gateway_config_not_submitted covers the failure path.
• Without the fix, 2 of these fail.
• uv run ruff check and uv run ruff format --check on the changed files: clean.

🤖 Generated with Claude Code