feat: add customer authentication and scoped RBAC

vehicle-data-platform/apps/api/internal/config/config.go

@@ -22,6 +22,9 @@ type Config struct {
 	AuthToken               string
 	AuthMode                string
 	AuthTokensJSON          string
+	BootstrapAdminUsername  string
+	BootstrapAdminPassword  string
+	SessionTTL              time.Duration
 	DataMode                string
 	ExportDir               string
 	RequestTimeout          time.Duration
@@ -56,6 +59,9 @@ func Load() Config {
 		AuthToken:               os.Getenv("AUTH_TOKEN"),
 		AuthMode:                authMode(),
 		AuthTokensJSON:          os.Getenv("AUTH_TOKENS_JSON"),
+		BootstrapAdminUsername:  os.Getenv("BOOTSTRAP_ADMIN_USERNAME"),
+		BootstrapAdminPassword:  os.Getenv("BOOTSTRAP_ADMIN_PASSWORD"),
+		SessionTTL:              time.Duration(envInt("AUTH_SESSION_TTL_HOURS", 12)) * time.Hour,
 		DataMode:                dataMode(),
 		ExportDir:               os.Getenv("EXPORT_DIR"),
 		RequestTimeout:          time.Duration(envInt("REQUEST_TIMEOUT_MS", 5000)) * time.Millisecond,