feat: implement v1 consumer API endpoints with runtime_id support (REQ-004~010)

- Generate runtime_id for service-token issuance (CLI and API)
- Implement GET /v1/assets endpoint with asset view and strategy_params
- Implement GET /v1/user_info endpoint with trading_enabled and broker credentials
- Implement POST /v1/assets/{asset_id}/ledger/trades with idempotency support
- Update auth service to support runtime_id tracking and credential encryption
- Add comprehensive test coverage for v1 endpoints (dcy-002 implementation)
- Update postgres repository for ledger and broker credential queries
- Ensure all tests pass for feature validation

tests/test_cli.py

@@ -122,6 +122,7 @@ class FakeRepo:
         permission: str,
         token_type: str,
         expires_at: datetime | None = None,
+        runtime_id: str | None = None,
     ) -> AuthToken:
         token = AuthToken(
             id=f"token-{self._token_seq}",
@@ -132,6 +133,7 @@ class FakeRepo:
             token_type=token_type,
             expires_at=expires_at,
             created_at=datetime.now(timezone.utc),
+            runtime_id=runtime_id,
         )
         self._token_seq += 1
         self._auth_tokens[token.id] = token
@@ -851,6 +853,7 @@ def test_cli_service_token_issue_supports_json() -> None:
     assert payload["name"] == "nightly"
     assert payload["revoked"] is False
     assert payload["expires_at"] is not None
+    assert payload["runtime_id"] is not None
 
 
 def test_cli_service_token_issue_rejects_conflicting_expiry_options() -> None: