feat(FN-004): merge fusion/fn-004

apps/api/app/config.py

@@ -12,17 +12,22 @@ class Settings(BaseSettings):
     debug: bool = False
     api_v1_prefix: str = "/api/v1"
 
-    # Authentik OIDC placeholders (to be wired in FN-004)
+    # Authentik OIDC
     authentik_issuer_url: str = ""
     authentik_client_id: str = ""
     authentik_client_secret: str = ""
 
-    # Database (to be wired in FN-004)
+    # Database
     database_url: str = "postgresql://postgres:postgres@localhost:5432/headquarter"
 
     # Deployment
     root_domain: str = "localhost"
     tool_subdomain_pattern: str = "{tool}-{project}-{user}.tools.{root_domain}"
 
+    # Auth & encryption
+    secret_encryption_key: str = "change-me-in-production"
+    access_token_expire_minutes: int = 60
+    auth_dev_bypass: bool = False
+
 
 settings = Settings()