Organize local infrastructure and Vault secrets by service ownership

infra/local/notifications/runtime.yml

@@ -0,0 +1,30 @@
+listen: "0.0.0.0:8083"
+database:
+  driver: mongodb
+  settings:
+    uri: mongodb://mongo:27017/sxchnge_notifications?authSource=admin&replicaSet=rs0
+    vault:
+      address: http://vault:8200
+      role: notifications
+      role_id_file: /etc/agent/role-id
+      secret_id_file: /etc/agent/secret-id
+    database: sxchnge_notifications
+messaging:
+  driver: NATS
+  settings:
+    url_env: SXCHNGE_NATS_URL
+    broker_name: sxchnge-notifications
+    max_reconnects: -1
+    reconnect_wait: 2
+templates: "/etc/sxchnge/templates.json"
+callers:
+  product: "SXCHNGE_NOTIFICATIONS_PRODUCT_TOKEN"
+# Use replicas: 3 and environment: production for a three-node NATS cluster.
+# mode: ops validates resources without modifying them; app provisions them.
+queue:
+  stream:
+    replicas: 1
+    max_age_hours: 48
+  provisioning:
+    mode: app
+    environment: non-production