Implement HTTP ingestion and retention lifecycle

src/artifactstore/config.py

@@ -23,6 +23,21 @@ class Settings(BaseSettings):
     database_url: str = "sqlite+aiosqlite:///./var/artifactstore.db"
     storage_local_root: str = "./var/storage"
     log_level: str = "INFO"
+    auth_tokens: str = ""
+    anon_read: bool = False
+    api_url: str = "http://127.0.0.1:8000"
+    api_token: str = ""
+    retention_config_path: str = ""
+    retention_sweep_interval_seconds: int = 3600
+
+    @property
+    def bearer_tokens(self) -> frozenset[str]:
+        """Configured shared-secret bearer tokens, parsed from CSV / newline text."""
+        return frozenset(
+            token.strip()
+            for token in self.auth_tokens.replace("\n", ",").split(",")
+            if token.strip()
+        )
 
 
 def get_settings() -> Settings: