cloud

type Config struct {
	DSN              string
	JWTSecret        string
	CORSOrigins      []string
	MaxPool          int
	Port             int
	BindHost         string
	AdminToken       string
	AllowedProjects  []string
	MaxPushBodyBytes int64
	// TokenPepper is the dedicated secret used to hash managed cloud tokens
	// (see internal/cloud/auth.ManagedTokenHasher). It MUST be distinct from
	// JWTSecret so rotating the dashboard/session signing secret does not
	// implicitly rotate or invalidate stored managed token verifiers.
	TokenPepper string
}