cli: add scale and scaling-events commands to job cmd.

Add metrics command / output to debug bundle

Do not double-remove checks removed by Consul

cli: add policy list and info to new scaling cmd.

This adds the ability to scale Nomad jobs and view scaling events
via the CLI.

cli: move tests to use NewMockUi func.

When deregistering a service, consul also deregisters the associated
checks. The current state keeps track of all services and all checks
separately and deregisters them in sequence, which leads, whether during
syncs or shutdowns, to check deregistrations happening twice and failing
the second time (generating errors in logs)

This fix includes:
- a fix to the sync logic that just pulls the checks *after* the
services have been synced
- a fix to the shutdown mechanism that gets an updated list of checks
after deregistering the services, so that we get a cleaner check
deregistration process.

consul/connect: trigger update as necessary on connect changes

job, task group, and task IDs should not allow null characters

This PR fixes a long standing bug where submitting jobs with changes
to connect services would not trigger updates as expected. Previously,
service blocks were not considered as sources of destructive updates
since they could be synced with consul non-destructively. With Connect,
task group services that have changes to their connect block or to
the service port should be destructive, since the network plumbing of
the alloc is going to need updating.

Fixes #8596 #7991

Non-destructive half in #7192

updated CHANGELOG and upgrade guide

[doc] fix deprecated port_map example

Add service discovery integration to the existing consul-template E2E test,
and verify both service and key updates force re-rendering. Fixes flakiness by
using the longer default wait config we use elsewhere.

Removes our last direct dependency on gomega.

docs: Format docs website code and mdx

Provisions vault with the policies described in the Nomad Vault integration
guide, and drops a configuration file for Nomad vault server configuration
with its token. The vault root token is exposed to the E2E runner so that
tests can write additional policies to vault.

This adds the ability to detail scaling policies via the CLI.

Use 32-byte key for gossip encryption to enable AES-256 

Co-authored-by: Seth Hoenig <shoenig@hashicorp.com>

docs: document docker signal fix, add tests

So a null logger is used to avoid the problem.

This PR adds a version specific upgrade note about the docker stop
signal behavior. Also adds test for the signal logic in docker driver.

Closes #8932 which was fixed in #8933

The `-var-file` flag for loading variables into Terraform overlays the default
variables file if present. This means that variables that are set in the
default variables file will take precedence if the overlay file does not have
them set.

Set `nomad_acls` and `nomad_enteprise` to `false` in the dev cluster.