Wire confidential relay service into CRE startup (#22043)

* wire confidential relay service into CRE startup

Register confidentialrelay.NewService as a CRE subservice so the
relay DON handler starts alongside the gateway connector.

* fix changeset: remove stale fetcher reference

* gate confidential relay service behind CRE.ConfidentialRelay.Enabled

Allows disabling the relay handler without code changes. Default is
false (opt-in); E2E tests already set it via the ConfidentialRelay
feature in system-tests/lib.

Author: nadahalli

.changeset/confidential-workflow-execution.md

@@ -0,0 +1,5 @@
+---
+"chainlink": minor
+---
+
+Wire confidential relay service into CRE startup #added

core/services/cre/cre.go

@@ -32,6 +32,7 @@ import (
 
 	"github.com/smartcontractkit/chainlink/v2/core/capabilities"
 	"github.com/smartcontractkit/chainlink/v2/core/capabilities/compute"
+	"github.com/smartcontractkit/chainlink/v2/core/capabilities/confidentialrelay"
 	gatewayconnector "github.com/smartcontractkit/chainlink/v2/core/capabilities/gateway_connector"
 	"github.com/smartcontractkit/chainlink/v2/core/capabilities/localcapmgr"
 	"github.com/smartcontractkit/chainlink/v2/core/capabilities/remote"
@@ -171,6 +172,16 @@ func (s *Services) newSubservices(
 		}
 		s.GatewayConnectorWrapper = gatewayConnectorWrapper
 		srvs = append(srvs, gatewayConnectorWrapper)
+
+		if cfg.CRE().ConfidentialRelay().Enabled() {
+			relayService := confidentialrelay.NewService(
+				gatewayConnectorWrapper,
+				opts.CapabilitiesRegistry,
+				lggr,
+				opts.LimitsFactory,
+			)
+			srvs = append(srvs, relayService)
+		}
 	}
 
 	if cfg.CRE().Linking().URL() != "" {