feat(V1-API): implement TREX-Basic consumer API contract with encryption and persistence

- Add V1 API endpoints: assets, ledger, user-info
- Implement Fernet-based credential payload encryption (req-010)
- Extend health response schema with runtime info (req-004)
- Add service token runtime ID issuance (req-005)
- Implement database schema migration for V1 API (req-009)
- Add comprehensive test coverage for V1 endpoints
- Update SRS with 10 new requirements (REQ-004 through REQ-011)
- Create batch planning, design, and verification for BAT-001
- Integrate review-discovery StagePilot skill
- Update documentation indices and baseline specs

app/core/auth.py

@@ -28,6 +28,7 @@ class AuthContext:
     token_id: str | None = None
     token_type: str | None = None
     token_source: str = "env"
+    runtime_id: str | None = None
 
 def get_auth_repository(settings: Settings = Depends(get_settings)) -> Generator[PortfolioRepository, None, None]:
     repository = get_portfolio_repository_from_settings(settings)
@@ -66,6 +67,7 @@ def _resolve_auth_context(token: str, settings: Settings, repository: PortfolioR
         token_id=principal.token_id,
         token_type=principal.token_type,
         token_source="db",
+        runtime_id=principal.runtime_id,
     )