Implement environment configuration, target URL allow-list management, and audit logging baseline

[kalen-releasedgroup]

Summary

Deliver the first administration slice and enforce the most important server-side launch policy.

Scope

• Implement environment configuration and target base URL allow-list management.
• Add audit events for configuration changes and security-sensitive actions.
• Provide initial admin UI/API surfaces for policy management.

Requirement Links

• Sections 11, 12.4, 12.7, 13.1
• FR-ADM-001, FR-ADM-003
• Acceptance Criterion 11

Dependencies

• Host shell
• Persistence baseline

Exit Criteria

• Allow-list entries are managed server-side.
• Allow-list changes are audited.
• The recording/replay launch pipeline can depend on this policy store.