refactor(observer): extract create/revoke helpers from observer_cli
Keep observer registration writes behind shared helpers so install can reuse the same key lifecycle without duplicating CLI behavior.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>