feat(firewall): add audited configuration management

Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>

core/lib/Service/SystemFirewallStatusService.php

@@ -9,10 +9,12 @@ use KTXC\Context\IdentityContextInterface;
 final class SystemFirewallStatusService
 {
     public const PERMISSION_MAINTENANCE_READ = 'firewall.system.maintenance.read';
+    public const PERMISSION_SETTINGS_MANAGE = 'firewall.system.settings.manage';
 
     public function __construct(
         private readonly FirewallStatusService $status,
         private readonly IdentityContextInterface $identity,
+        private readonly FirewallSettingsService $settings,
     ) {
     }
 
@@ -28,6 +30,26 @@ final class SystemFirewallStatusService
         return $this->status->maintenanceStatus();
     }
 
+    public function updateTenantConfiguration(
+        string $tenantId,
+        bool $enabled,
+        int $maxAuthFailures,
+        int $authFailureWindow,
+        int $autoBlockDuration,
+        string $reason
+    ): ?array {
+        $this->requirePermission(self::PERMISSION_SETTINGS_MANAGE);
+        return $this->settings->update(
+            $tenantId,
+            $enabled,
+            $maxAuthFailures,
+            $authFailureWindow,
+            $autoBlockDuration,
+            $reason,
+            $this->identity->identifier()
+        );
+    }
+
     private function requirePermission(string $permission): void
     {
         if (!$this->identity->hasPermission($permission)) {