Hub-and-Spoke Umbau: Multi-Tenant Zentrale + Satellite-Agent

- Backend: Customer/Satellite Models, customer_id auf Server/Job/Audit
- Satellite-API: heartbeat, poll (atomares Claiming), logs, result,
  scan-result, health-report - Auth via X-Api-Key (SHA-256 gehasht)
- Job-Queue: pending/claimed/running/success/failed + Stale-Janitor
- Batch-Trigger: ein Job pro Server, Satellite arbeitet sequenziell ab
- Credentials bleiben lokal: nur symbolische credential_ref zentral
- Neues Paket satellite/: Pull-Loop, WinRM/SSH/CAU/Scanner, PyInstaller-tauglich
- Frontend: Kunden-Switcher, Satelliten-View, Polling statt WebSocket
- Entfernt: WebSocket/Socket.io, Redis, zentrale Credentials, JobRunner
- Docs: README/AGENTS/PROMPT auf neue Architektur aktualisiert

backend/app/core/config.py

@@ -18,7 +18,6 @@ class Settings(BaseSettings):
     app_env: str = "development"
     app_name: str = "Insight Updater"
     secret_key: str = "dev-secret-change-me-32-chars-min"
-    encryption_key: str = ""
     log_level: str = "INFO"
     log_format: str = "json"
 
@@ -29,19 +28,12 @@ class Settings(BaseSettings):
     jwt_access_token_expire_minutes: int = 30
     jwt_refresh_token_expire_days: int = 7
 
-    # Database / Redis
+    # Database
     database_url: str = "sqlite+aiosqlite:///./data/app.db"
-    redis_url: str = "redis://localhost:6379/0"
 
-    # WinRM
-    winrm_transport: str = "ntlm"
-    winrm_cert_validation: str = "ignore"
-    winrm_operation_timeout: int = 60
-    winrm_read_timeout: int = 120
-    winrm_kerberos_delegation: bool = True
-
-    # SSH
-    ssh_timeout: int = 30
+    # Jobs: a claimed/running job without satellite reports for this many
+    # seconds is considered stale and marked failed by the janitor
+    job_stale_timeout: int = 3600
 
     # LDAP (stub)
     ldap_enabled: bool = False