wip: doctor/cli/docs/api to vector db consolidation; api hardening for descriptions, tenant, and scopes; migrations and conversions of all DALs to EF v10

src/Timeline/StellaOps.Timeline.WebService/Program.cs

@@ -1,8 +1,10 @@
+using StellaOps.Auth.Abstractions;
 using StellaOps.Auth.ServerIntegration;
 using StellaOps.Eventing;
 using StellaOps.Router.AspNet;
 using StellaOps.Timeline.Core;
 using StellaOps.Timeline.WebService.Endpoints;
+using StellaOps.Timeline.WebService.Security;
 
 var builder = WebApplication.CreateBuilder(args);
 
@@ -24,6 +26,14 @@ builder.Services.AddSwaggerGen(options =>
 builder.Services.AddHealthChecks()
     .AddCheck<TimelineHealthCheck>("timeline");
 
+// Authentication and authorization
+builder.Services.AddStellaOpsResourceServerAuthentication(builder.Configuration);
+builder.Services.AddAuthorization(options =>
+{
+    options.AddStellaOpsScopePolicy(TimelinePolicies.Read, StellaOpsScopes.TimelineRead);
+    options.AddStellaOpsScopePolicy(TimelinePolicies.Write, StellaOpsScopes.TimelineWrite);
+});
+
 builder.Services.AddStellaOpsCors(builder.Environment, builder.Configuration);
 
 // Stella Router integration
@@ -45,6 +55,8 @@ if (app.Environment.IsDevelopment())
 }
 
 app.UseStellaOpsCors();
+app.UseAuthentication();
+app.UseAuthorization();
 app.TryUseStellaRouter(routerEnabled);
 
 // Map endpoints