fix: complete audit security and frontend gaps

backend/internal/config/config.go

@@ -3,18 +3,24 @@ package config
 import "os"
 
 type Config struct {
-	Env         string
-	DatabaseURL string
-	StorageDir  string
-	SystemAIKey string
+	Env                   string
+	Port                  string
+	DatabaseURL           string
+	StorageDir            string
+	AuthSecret            string
+	SystemAIKey           string
+	AIKeyEncryptionSecret string
 }
 
 func Load() Config {
 	return Config{
-		Env:         getenv("APP_ENV", "development"),
-		DatabaseURL: getenv("DATABASE_URL", "postgres://agent:agent@localhost:5432/agent?sslmode=disable"),
-		StorageDir:  getenv("STORAGE_DIR", "./data/files"),
-		SystemAIKey: os.Getenv("SYSTEM_AI_KEY"),
+		Env:                   getenv("APP_ENV", "development"),
+		Port:                  getenv("PORT", "8080"),
+		DatabaseURL:           getenv("DATABASE_URL", "postgres://agent:agent@localhost:5432/agent?sslmode=disable"),
+		StorageDir:            getenv("STORAGE_DIR", "./data/files"),
+		AuthSecret:            getenv("AUTH_SECRET", "development-auth-secret-change-me"),
+		SystemAIKey:           os.Getenv("SYSTEM_AI_KEY"),
+		AIKeyEncryptionSecret: getenv("AI_KEY_ENCRYPTION_SECRET", "development-ai-key-secret-change-me"),
 	}
 }