feat(api): M4.2 — REST surface + pgx Postgres store + OpenAPI 3.1

Full M4.2 deliverable: 16 endpoints (tenants CRUD + lifecycle, catalog, entitlements, API keys with argon2 hashing, audit append + filter), Store interface with pgx-backed Postgres + in-memory parallel implementations exercised by the same eachStore harness, openapi.yaml at 3.1 with kin-openapi contract test. M4.3 adds auth. Refs: M4.2
2026-05-19 10:51:59 +00:00
parent d66760b246
commit ffab866c87
26 changed files with 3115 additions and 266 deletions
@@ -1,11 +1,11 @@
 # tenant-registry — local dev environment.
-#
-# Copy to .env.local (gitignored) and edit. The service reads env vars
-# directly via internal/config; this file is just documentation.
+# Copy to .env.local (gitignored).

 APP_ENV=dev
 ADDR=:8090
 KEYCLOAK_ISSUER=http://localhost:8080/realms/breakpilot-dev

-# Postgres DSN — unused by the skeleton (in-memory store). Wired up in M4.1.
+# Postgres DSN. Leave empty for in-memory store (the seeded acme tenant
+# only; data lost on restart). Set to use the dev-stack Postgres + run
+# `make migrate-up` first.
 # DATABASE_URL=postgres://platform:platform-dev-pass@localhost:5432/platform?sslmode=disable