fix(appd): handle SIGTERM for clean shutdown under systemd

run() now registers a SIGTERM handler (unix-only, cfg-gated) alongside
the existing SIGINT handler. Both break the accept loop and allow the
Unix socket to be removed before exit.

On non-Unix targets the SIGTERM arm uses std::future::pending so the
select! shape is unchanged at the type level.

crates/weft-appd/src/main.rs

@@ -132,9 +132,18 @@ async fn run() -> anyhow::Result<()> {
 
     let _ = sd_notify::notify(false, &[sd_notify::NotifyState::Ready]);
 
-    let mut shutdown = std::pin::pin!(tokio::signal::ctrl_c());
+    #[cfg(unix)]
+    let mut sigterm = {
+        use tokio::signal::unix::{SignalKind, signal};
+        signal(SignalKind::terminate()).context("SIGTERM handler")?
+    };
 
     loop {
+        #[cfg(unix)]
+        let term = sigterm.recv();
+        #[cfg(not(unix))]
+        let term = std::future::pending::<Option<()>>();
+
         tokio::select! {
             result = listener.accept() => {
                 let (stream, _) = result.context("accept")?;
@@ -155,8 +164,12 @@ async fn run() -> anyhow::Result<()> {
                     }
                 });
             }
-            _ = &mut shutdown => {
+            _ = tokio::signal::ctrl_c() => {
-                tracing::info!("shutting down");
+                tracing::info!("SIGINT received; shutting down");
+                break;
+            }
+            _ = term => {
+                tracing::info!("SIGTERM received; shutting down");
                 break;
             }
         }