Add producer-owned authenticated Go decision client and validated Forgejo profile

Assistant: codex Assistant-Model: gpt-6.1-sol Assistant-Session: 01a14bfc-9643-7872-aa12-98326dcf25e7
2026-10-18 01:20:05 +02:00 · 2026-10-18 01:20:05 +02:00 · ca0cb75729
commit ca0cb75729
parent d328a26010
24 changed files with 2980 additions and 4 deletions
--- a/internal/decision/engine.go
+++ b/internal/decision/engine.go
@ -470,7 +470,7 @@ func (e *Engine) envelope(ctx context.Context, request, submitted api.CheckReque
 		},
 		Provenance: api.DecisionProvenance{
 			Evaluator:              "flex-auth/local",
-			Mode:                   "standalone",
+			Mode:                   envelopeMode(ctx),
 			PolicyPackage:          e.policy.Metadata.ID,
 			PolicyVersion:          e.policy.Metadata.Version,
 			PolicyPackageDigest:    e.policy.Digest(),