fix: enforce authentication for superuser cli command (#9152)

* Enforce authentication for superuser cli command

* shorten security md

* cleanup

* use session_scope

* re-add uvlock

* [autofix.ci] apply automated fixes

* ruff

* update env example

* [autofix.ci] apply automated fixes

* better exception handling

* [autofix.ci] apply automated fixes

* update tests to not use mocks

* [autofix.ci] apply automated fixes

* [autofix.ci] apply automated fixes

* Remove old test

* Catch exceptions for typer

* Try output instead of stdout

* Use xdist to run in serial

* Separate create superuse

* [autofix.ci] apply automated fixes

* Ruff

* [autofix.ci] apply automated fixes

* lint

---------

Co-authored-by: autofix-ci[bot] <114827586+autofix-ci[bot]@users.noreply.github.com>

.env.example

@@ -79,12 +79,16 @@ LANGFLOW_REMOVE_API_KEYS=
 # LANGFLOW_REDIS_CACHE_EXPIRE (default: 3600)
 LANGFLOW_CACHE_TYPE=
 
-# Set AUTO_LOGIN to false if you want to disable auto login
+# Set LANGFLOW_AUTO_LOGIN to false if you want to disable auto login
 # and use the login form to login. LANGFLOW_SUPERUSER and LANGFLOW_SUPERUSER_PASSWORD
 # must be set if AUTO_LOGIN is set to false
 # Values: true, false
 LANGFLOW_AUTO_LOGIN=
 
+# SET LANGFLOW_ENABLE_SUPERUSER_CLI to false to disable
+# superuser creation via the CLI
+LANGFLOW_ENABLE_SUPERUSER_CLI=
+
 # Superuser username
 # Example: LANGFLOW_SUPERUSER=admin
 LANGFLOW_SUPERUSER=
@@ -111,4 +115,4 @@ LANGFLOW_STORE_ENVIRONMENT_VARIABLES=
 
 # Value must finish with slash /
 #BACKEND_URL=http://localhost:7860/
-BACKEND_URL=
+BACKEND_URL=