feat: add institutional governance and recovery contracts

src/govoplan_core/settings.py

@@ -6,6 +6,40 @@ class Settings(BaseSettings):
     model_config = SettingsConfigDict(env_file=None, extra="ignore")
 
     app_env: str = Field(default="dev", alias="APP_ENV")
+    installation_id: str = Field(
+        default="govoplan-local",
+        alias="GOVOPLAN_INSTALLATION_ID",
+    )
+    state_profile: str = Field(
+        default="local",
+        alias="GOVOPLAN_STATE_PROFILE",
+    )
+    runtime_role: str = Field(default="api", alias="GOVOPLAN_RUNTIME_ROLE")
+    runtime_node_id: str | None = Field(default=None, alias="GOVOPLAN_NODE_ID")
+    runtime_heartbeat_seconds: int = Field(
+        default=15,
+        ge=2,
+        le=300,
+        alias="GOVOPLAN_RUNTIME_HEARTBEAT_SECONDS",
+    )
+    runtime_stale_after_seconds: int = Field(
+        default=60,
+        ge=10,
+        le=3600,
+        alias="GOVOPLAN_RUNTIME_STALE_AFTER_SECONDS",
+    )
+    runtime_expected_api_replicas: int = Field(
+        default=1,
+        ge=1,
+        le=1000,
+        alias="GOVOPLAN_EXPECTED_API_REPLICAS",
+    )
+    runtime_expected_worker_replicas: int = Field(
+        default=0,
+        ge=0,
+        le=1000,
+        alias="GOVOPLAN_EXPECTED_WORKER_REPLICAS",
+    )
     module_live_apply_enabled: bool | None = Field(
         default=None,
         alias="GOVOPLAN_MODULE_LIVE_APPLY_ENABLED",
@@ -78,6 +112,10 @@ class Settings(BaseSettings):
         default=False,
         alias="FILE_STORAGE_S3_DEPLOYMENT_MANAGED",
     )
+    file_storage_s3_endpoint_trusted: bool = Field(
+        default=False,
+        alias="FILE_STORAGE_S3_ENDPOINT_TRUSTED",
+    )
     file_upload_max_bytes: int = Field(default=50 * 1024 * 1024, alias="FILE_UPLOAD_MAX_BYTES")
     file_upload_zip_max_bytes: int = Field(default=250 * 1024 * 1024, alias="FILE_UPLOAD_ZIP_MAX_BYTES")
     file_archive_max_entries: int = Field(default=10_000, ge=1, alias="FILE_ARCHIVE_MAX_ENTRIES")