feat: implement v1 consumer API endpoints with runtime_id support (REQ-004~010)

- Generate runtime_id for service-token issuance (CLI and API)
- Implement GET /v1/assets endpoint with asset view and strategy_params
- Implement GET /v1/user_info endpoint with trading_enabled and broker credentials
- Implement POST /v1/assets/{asset_id}/ledger/trades with idempotency support
- Update auth service to support runtime_id tracking and credential encryption
- Add comprehensive test coverage for v1 endpoints (dcy-002 implementation)
- Update postgres repository for ledger and broker credential queries
- Ensure all tests pass for feature validation

app/cli/commands/service_tokens.py

@@ -78,6 +78,7 @@ def issue_service_token(
         name=name,
         expires_at=issued.auth_token.expires_at,
         revoked=issued.auth_token.revoked_at is not None,
+        runtime_id=issued.auth_token.runtime_id,
         token=issued.token,
     )
     render_service_token_result(ctx.obj.console, ctx.obj.output_format, response)

app/repositories/portfolio_repository.py

@@ -52,6 +52,7 @@ class PortfolioRepository(Protocol):
         permission: str,
         token_type: str,
         expires_at: datetime | None = None,
+        runtime_id: str | None = None,
     ) -> AuthToken: ...
 
     def list_auth_tokens(self, user_id: str) -> list[AuthToken]: ...

app/repositories/postgres.py

@@ -38,7 +38,8 @@ _SELECT_AUTH_TOKEN = """
         expires_at,
         last_used_at,
         revoked_at,
-        created_at
+        created_at,
+        runtime_id
     FROM auth_tokens
 """
 
@@ -133,6 +134,7 @@ class PostgresPortfolioRepository:
                     token_hash TEXT NOT NULL UNIQUE,
                     permission TEXT NOT NULL,
                     token_type TEXT NOT NULL,
+                    runtime_id TEXT,
                     expires_at TIMESTAMPTZ,
                     last_used_at TIMESTAMPTZ,
                     revoked_at TIMESTAMPTZ,
@@ -140,6 +142,7 @@ class PostgresPortfolioRepository:
                 )
                 """
             )
+            cur.execute("ALTER TABLE auth_tokens ADD COLUMN IF NOT EXISTS runtime_id TEXT")
             cur.execute(
                 """
                 CREATE INDEX IF NOT EXISTS idx_auth_tokens_user_created
@@ -300,6 +303,7 @@ class PostgresPortfolioRepository:
             last_used_at=row[7] if len(row) > 7 else None,
             revoked_at=row[8] if len(row) > 8 else None,
             created_at=row[9] if len(row) > 9 else None,
+            runtime_id=row[10] if len(row) > 10 else None,
         )
 
     @staticmethod
@@ -532,6 +536,7 @@ class PostgresPortfolioRepository:
         permission: str,
         token_type: str,
         expires_at: datetime | None = None,
+        runtime_id: str | None = None,
     ) -> AuthToken:
         self.ensure_schema()
         with self._connect().cursor() as cur:
@@ -542,14 +547,14 @@ class PostgresPortfolioRepository:
             cur.execute(
                 """
                 INSERT INTO auth_tokens (
-                    id, user_id, name, token_prefix, token_hash, permission, token_type, expires_at
+                    id, user_id, name, token_prefix, token_hash, permission, token_type, expires_at, runtime_id
                 )
-                VALUES (%s, %s, %s, %s, %s, %s, %s, %s)
+                VALUES (%s, %s, %s, %s, %s, %s, %s, %s, %s)
                 RETURNING
                     id, user_id, name, token_prefix, permission, token_type,
-                    expires_at, last_used_at, revoked_at, created_at
+                    expires_at, last_used_at, revoked_at, created_at, runtime_id
                 """,
-                (token_id, user_id, name, token_prefix, token_hash, permission, token_type, expires_at),
+                (token_id, user_id, name, token_prefix, token_hash, permission, token_type, expires_at, runtime_id),
             )
             row = cur.fetchone()
         return self._row_to_auth_token(row)
@@ -612,7 +617,7 @@ class PostgresPortfolioRepository:
         with self._connect().cursor() as cur:
             cur.execute(
                 """
-                SELECT t.id, t.user_id, t.permission, t.token_type
+                                SELECT t.id, t.user_id, t.permission, t.token_type, t.runtime_id
                 FROM auth_tokens t
                 WHERE token_hash = %s
                   AND t.revoked_at IS NULL
@@ -629,6 +634,7 @@ class PostgresPortfolioRepository:
             user_id=row[1],
             permission=row[2],
             token_type=row[3],
+            runtime_id=row[4] if len(row) > 4 else None,
         )
 
     def get(self, portfolio_id: str) -> Portfolio:

app/services/auth_service.py

@@ -2,6 +2,7 @@
 
 from __future__ import annotations
 
+import uuid
 from dataclasses import dataclass
 from datetime import datetime, timedelta, timezone
 
@@ -131,6 +132,7 @@ class AuthService:
             expires_at = datetime.now(timezone.utc) + timedelta(days=days)
 
         raw_token = generate_token()
+        runtime_id = str(uuid.uuid4())
         try:
             auth_token = self._repository.create_auth_token(
                 user.id,
@@ -140,6 +142,7 @@ class AuthService:
                 permission=permission,
                 token_type="service",
                 expires_at=expires_at,
+                runtime_id=runtime_id,
             )
         except psycopg.errors.UniqueViolation as exc:
             raise ValueError(f"이미 존재하는 서비스 토큰 이름입니다: {name}") from exc