Add device enrollment API and agent protocol

Expose ITAM REST endpoints for agents, console GraphQL for device
management, and wire probod bootstrap with enrollment e2e coverage.

Signed-off-by: Ludovic Vielle <ludovic@probo.com>

contrib/helm/charts/probo/templates/deployment.yaml

@@ -149,6 +149,8 @@ spec:
             {{- end }}
             - name: PROBOD_AUTH_PASSWORD_ITERATIONS
               value: {{ .Values.probo.auth.passwordIterations | quote }}
+            - name: PROBOD_ITAM_DEVICE_ENROLLMENT_TOKEN_VALIDITY
+              value: {{ .Values.probo.itam.deviceEnrollmentTokenValidity | quote }}
             {{- if .Values.probo.saml.enabled }}
             # SAML Authentication
             - name: PROBOD_SAML_SESSION_DURATION

contrib/helm/charts/probo/values.yaml

@@ -234,6 +234,11 @@ probo:
     passwordPepper: ""
     passwordIterations: 1000000
 
+  # ITAM / device agent configuration
+  itam:
+    # One-shot enrollment token validity in seconds (default: 604800 = 7 days)
+    deviceEnrollmentTokenValidity: 604800
+
   # SAML authentication (optional)
   saml:
     # Enable SAML authentication