stela ops usage fixes roles propagation and timoeut, one account to support multi tenants, migrations consolidation, search to support documentation, doctor and open api vector db search

src/Router/__Libraries/StellaOps.Router.AspNet/StellaRouterOptionsBase.cs

@@ -1,4 +1,5 @@
 using StellaOps.Router.Common.Enums;
+using StellaOps.Microservice.AspNetCore;
 
 namespace StellaOps.Router.AspNet;
 
@@ -42,6 +43,25 @@ public class StellaRouterOptionsBase
     /// </summary>
     public int HeartbeatIntervalSeconds { get; set; } = 10;
 
+    /// <summary>
+    /// Service trust mode for gateway-enforced authorization semantics.
+    /// Default: Hybrid.
+    /// </summary>
+    public GatewayAuthorizationTrustMode AuthorizationTrustMode { get; set; }
+        = GatewayAuthorizationTrustMode.Hybrid;
+
+    /// <summary>
+    /// Shared signing key used to verify gateway identity envelopes.
+    /// Required when AuthorizationTrustMode is GatewayEnforced.
+    /// </summary>
+    public string? IdentityEnvelopeSigningKey { get; set; }
+
+    /// <summary>
+    /// Allowed clock skew in seconds when validating gateway identity envelopes.
+    /// Default: 30 seconds.
+    /// </summary>
+    public int IdentityEnvelopeClockSkewSeconds { get; set; } = 30;
+
     /// <summary>
     /// Gateway endpoints to connect to for endpoint registration.
     /// </summary>