feat(ops): protect metrics, rate-limit auth, agent secret timing, e2e smoke

Bearer для /metrics (EVOBGP_METRICS_TOKEN); rate limit /v1/auth/config; constant-time agent secret; OTel stub; Playwright smoke; HTTP_PROXY note; checklist обновлён. Co-authored-by: Cursor <[email protected]>
2026-07-31 12:29:00 +07:00
parent 26f5172f88
commit 6c6e76fca3
15 changed files with 224 additions and 6 deletions
@@ -29,6 +29,7 @@ type Server struct {
 	maintConfig             *maintenance.ConfigProvider
 	maintStats              *maintenance.DBStatsProvider
 	jobs                    *jobs.Registry
+	authLimiter             *authRateLimiter
 	bundlePriv              ed25519.PrivateKey
 	keyResolver             *apiKeyResolver
 	firewallResolver        *firewallTokenResolver