feat!: scope per-app config and settings by environment

BREAKING: wipe dev PostgreSQL before deploying — V1 checksum changes.
Agents must now send environmentId on registration (400 if missing).

Two tables previously keyed on app name alone caused cross-environment
data bleed: writing config for (app=X, env=dev) would overwrite the row
used by (app=X, env=prod) agents, and agent startup fetches ignored env
entirely.

- V1 schema: application_config and app_settings are now PK (app, env).
- Repositories: env-keyed finders/saves; env is the authoritative column,
  stamped on the stored JSON so the row agrees with itself.
- ApplicationConfigController.getConfig is dual-mode — AGENT role uses
  JWT env claim (agents cannot spoof env); non-agent callers provide env
  via ?environment= query param.
- AppSettingsController endpoints now require ?environment=.
- SensitiveKeysAdminController fan-out iterates (app, env) slices so each
  env gets its own merged keys.
- DiagramController ingestion stamps env on TaggedDiagram; ClickHouse
  route_diagrams INSERT + findProcessorRouteMapping are env-scoped.
- AgentRegistrationController: environmentId is required on register;
  removed all "default" fallbacks from register/refresh/heartbeat auto-heal.
- UI hooks (useApplicationConfig, useProcessorRouteMapping, useAppSettings,
  useAllAppSettings, useUpdateAppSettings) take env, wired to
  useEnvironmentStore at all call sites.
- New ConfigEnvIsolationIT covers env-isolation for both repositories.

Plan in docs/superpowers/plans/2026-04-16-environment-scoping.md.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

cameleer-server-app/src/main/resources/db/migration/V1__init.sql

@@ -83,22 +83,26 @@ CREATE TABLE server_config (
 -- =============================================================
 
 CREATE TABLE application_config (
-    application   TEXT PRIMARY KEY,
+    application   TEXT NOT NULL,
+    environment   TEXT NOT NULL,
     config_val    JSONB NOT NULL,
     version       INTEGER NOT NULL DEFAULT 1,
     updated_at    TIMESTAMPTZ NOT NULL DEFAULT now(),
-    updated_by    TEXT
+    updated_by    TEXT,
+    PRIMARY KEY (application, environment)
 );
 
 CREATE TABLE app_settings (
-    application_id    TEXT             PRIMARY KEY,
+    application_id    TEXT             NOT NULL,
+    environment       TEXT             NOT NULL,
     sla_threshold_ms  INTEGER          NOT NULL DEFAULT 300,
     health_error_warn DOUBLE PRECISION NOT NULL DEFAULT 1.0,
     health_error_crit DOUBLE PRECISION NOT NULL DEFAULT 5.0,
     health_sla_warn   DOUBLE PRECISION NOT NULL DEFAULT 99.0,
     health_sla_crit   DOUBLE PRECISION NOT NULL DEFAULT 95.0,
     created_at        TIMESTAMPTZ      NOT NULL DEFAULT now(),
-    updated_at        TIMESTAMPTZ      NOT NULL DEFAULT now()
+    updated_at        TIMESTAMPTZ      NOT NULL DEFAULT now(),
+    PRIMARY KEY (application_id, environment)
 );
 
 -- =============================================================