svcforge: reference implementation

Complete working build of the system learn-python/ teaches.
164 tests, mypy --strict clean, domain coverage 99%.

.env.example

@@ -0,0 +1,18 @@
+# Copy to .env and fill in. .env is gitignored and must never be committed.
+# Real values live in ~/.config/svcforge/secrets.env (chmod 600).
+
+# Postgres — transaction pooler (6543). Runtime traffic.
+SVCFORGE_PG_DSN=postgresql://postgres.<project>:<password>@aws-1-ap-southeast-1.pooler.supabase.com:6543/postgres
+# Postgres — session pooler (5432). Migrations and psql only.
+SVCFORGE_PG_DSN_SESSION=postgresql://postgres.<project>:<password>@aws-1-ap-southeast-1.pooler.supabase.com:5432/postgres
+# Redis — Upstash. Derived state only.
+SVCFORGE_REDIS_DSN=rediss://default:<token>@<endpoint>.upstash.io:6379
+
+# API
+SVCFORGE_JWKS_URL=https://<issuer>/protocol/openid-connect/certs
+SVCFORGE_JWT_ISSUER=https://<issuer>
+SVCFORGE_JWT_AUDIENCE=svcforge
+
+# Worker
+SVCFORGE_WORKER_ID=worker-local
+SVCFORGE_WORKER_CONCURRENCY=4