feat(firewall): add audited configuration management

Signed-off-by: Sebastian Krupinski <krupinski01@gmail.com>

tests/php/Unit/Service/FirewallStatusServicesTest.php

@@ -8,11 +8,14 @@ use KTXC\Context\IdentityContextInterface;
 use KTXC\Context\TenantContextInterface;
 use KTXC\Models\Tenant\TenantConfiguration;
 use KTXC\Service\FirewallStatusService;
+use KTXC\Service\FirewallSettingsService;
 use KTXC\Service\SystemFirewallLogService;
 use KTXC\Service\SystemFirewallStatusService;
 use KTXC\Service\TenantFirewallLogService;
 use KTXC\Service\TenantFirewallStatusService;
+use KTXC\Service\TenantService;
 use KTXC\Stores\FirewallStore;
+use KTXF\Event\EventDispatcherInterface;
 use PHPUnit\Framework\Attributes\AllowMockObjectsWithoutExpectations;
 use PHPUnit\Framework\Attributes\TestDox;
 use PHPUnit\Framework\TestCase;
@@ -37,7 +40,9 @@ final class FirewallStatusServicesTest extends TestCase
             ->method('countBlockedRequests')
             ->with('tenant-a', self::isInstanceOf(\DateTimeImmutable::class))
             ->willReturn(7);
-        $service = new TenantFirewallStatusService(new FirewallStatusService($store), $tenant, $identity);
+        $service = new TenantFirewallStatusService(
+            new FirewallStatusService($store), $tenant, $identity, $this->settings()
+        );
 
         self::assertSame(7, $service->metrics('2026-08-01T00:00:00+00:00')['blockedRequests']);
         self::assertFalse($service->configuration()['enabled']);
@@ -55,7 +60,9 @@ final class FirewallStatusServicesTest extends TestCase
             ->with('tenant-a', null)
             ->willReturn(12);
         $store->method('maintenanceStatus')->willReturn(['status' => 'success']);
-        $service = new SystemFirewallStatusService(new FirewallStatusService($store), $identity);
+        $service = new SystemFirewallStatusService(
+            new FirewallStatusService($store), $identity, $this->settings()
+        );
 
         self::assertSame(12, $service->metrics('tenant-a')['blockedRequests']);
         self::assertSame('success', $service->maintenanceStatus()['status']);
@@ -80,14 +87,18 @@ final class FirewallStatusServicesTest extends TestCase
         $store->expects(self::never())->method('maintenanceStatus');
 
         try {
-            (new TenantFirewallStatusService(new FirewallStatusService($store), $tenant, $identity))->metrics();
+            (new TenantFirewallStatusService(
+                new FirewallStatusService($store), $tenant, $identity, $this->settings()
+            ))->metrics();
             self::fail('Tenant metrics should be rejected.');
         } catch (\RuntimeException $error) {
             self::assertStringContainsString(TenantFirewallLogService::PERMISSION_READ, $error->getMessage());
         }
 
         $this->expectExceptionMessage(SystemFirewallStatusService::PERMISSION_MAINTENANCE_READ);
-        (new SystemFirewallStatusService(new FirewallStatusService($store), $identity))->maintenanceStatus();
+        (new SystemFirewallStatusService(
+            new FirewallStatusService($store), $identity, $this->settings()
+        ))->maintenanceStatus();
     }
 
     #[TestDox('Metrics reject invalid dates before querying storage')]
@@ -99,4 +110,12 @@ final class FirewallStatusServicesTest extends TestCase
 
         (new FirewallStatusService($store))->systemMetrics(null, 'not-a-date');
     }
+
+    private function settings(): FirewallSettingsService
+    {
+        return new FirewallSettingsService(
+            $this->createStub(TenantService::class),
+            $this->createStub(EventDispatcherInterface::class)
+        );
+    }
 }