Step 3: port the missing runtime config keys.

Step 3: port the missing runtime config keys.

- Adds forge, Ra, inference grants, OAuth/encryption, recovery/retention,
  and DNS-cluster defaults to config/config.exs.
- Fills in every key that ported library code reads with Application.get_env
  or fetch_env so boot and tests stop raising on unset configuration.

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

Deploy story

What this commit did to the running system — joined from the forge receipt chain, the part a commit page elsewhere cannot show.

Not deployed through the forge lane

No push, promotion, build, or deploy receipt references this commit (receipts are scanned over a bounded recent window). Changes shipped by full node replacement carry their proof in the release gate receipt instead.

Changed files

modified config/config.exs

Diff

1 file changed, +55 -1

117	117		`retention_days: 30`
118	118		`],`
119	119		`leaderboard_limit: 100,`
120		-	`leaderboard_refresh_interval_ms: 1_000`
	120	+	`leaderboard_refresh_interval_ms: 1_000,`
	121	+	`leaderboard_auto_refresh_enabled: true,`
	122	+	`voice_recovery_worker_enabled: true,`
	123	+	`voice_retention_worker_enabled: true,`
	124	+	`turn_recovery_enabled: false,`
	125	+	`voice_retention_enabled: false,`
	126	+	`ra_enabled: false,`
	127	+	`incident_fixer_enabled: false,`
	128	+	`github_oauth: [`
	129	+	`client_id: nil,`
	130	+	`client_secret: nil,`
	131	+	`redirect_uri: "http://127.0.0.1:4000/auth/github/callback",`
	132	+	`attempt_ttl_seconds: 600,`
	133	+	`request_options: []`
	134	+	`],`
	135	+	`github_token_encryption_key: nil,`
	136	+	`voice_recording_encryption_key: nil,`
	137	+	`inference_proxy_url: nil,`
	138	+	`inference_grant_max_total_tokens: 2_000_000,`
	139	+	`inference_grant_max_calls: 64,`
	140	+	`inference_grant_max_cost_microusd: 5_000_000,`
	141	+	`inference_grant_ttl_seconds: 900,`
	142	+	`inference_input_price_microusd_per_ktoken: 1_250,`
	143	+	`inference_output_price_microusd_per_ktoken: 10_000,`
	144	+	`forge_enabled: false,`
	145	+	`forge_boot_converge_enabled: false,`
	146	+	`forge_deploy_lane_enabled: true,`
	147	+	`forge_data_dir: nil,`
	148	+	`forge_build_dir: "/var/lib/sarah/workspace/build",`
	149	+	`forge_repos: ["sarah"],`
	150	+	`forge_internal_git_url: "http://127.0.0.1:8080/git",`
	151	+	`forge_operator_token: nil,`
	152	+	`forge_mirror_urls: %{},`
	153	+	`forge_wal_adapter: OpenAgents.Forge.WAL.Local,`
	154	+	`forge_wal_dir: nil,`
	155	+	`forge_wal_bucket: nil,`
	156	+	`forge_gcs_token_provider: nil,`
	157	+	`forge_hot_load_allowlist: [`
	158	+	`"lib/openagents",`
	159	+	`"lib/openagents_web",`
	160	+	`"priv/sarah",`
	161	+	`"config",`
	162	+	`"mix.exs"`
	163	+	`],`
	164	+	`forge_public_visibility: %{"sarah" => :l2},`
	165	+	`forge_repo_owners: %{"sarah" => "OpenAgentsInc"},`
	166	+	`forge_public_paths: %{`
	167	+	`"sarah" => [`
	168	+	`"README.md",`
	169	+	`"CHANGELOG.md",`
	170	+	`"docs/audits/2026-08-19-public-changelog-transparency-audit.md",`
	171	+	`"docs/plans/2026-08-19-transparency-spec-and-roadmap.md"`
	172	+	`]`
	173	+	`},`
	174	+	`dns_cluster_query: nil`
121	175
122	176		`# Configure the endpoint`
123	177		`config :openagents, OpenAgentsWeb.Endpoint,`