feat: API gateway with passkey (WebAuthn) authentication

services/api_gateway/config.py

@@ -0,0 +1,25 @@
+"""API Gateway configuration — extends shared BaseConfig with JWT, CORS, and WebAuthn settings."""
+
+from shared.config import BaseConfig
+
+
+class ApiGatewayConfig(BaseConfig):
+    """Configuration for the API Gateway service.
+
+    All settings can be overridden via environment variables
+    prefixed with ``TRADING_``.
+    """
+
+    # JWT settings
+    jwt_secret_key: str = "CHANGE-ME-IN-PRODUCTION"
+    jwt_algorithm: str = "HS256"
+    access_token_expire_minutes: int = 15
+    refresh_token_expire_days: int = 7
+
+    # CORS settings
+    cors_origins: list[str] = ["http://localhost:5173"]
+
+    # WebAuthn (passkey) relying party settings
+    rp_id: str = "localhost"
+    rp_name: str = "Trading Bot"
+    rp_origin: str = "http://localhost:5173"