feat: add admin session rbac foundation

WonderQ-Admin/app/config.py

@@ -8,6 +8,15 @@ class Settings(BaseSettings):
     database_url: str = Field(default="postgresql://miniapp:miniapp_dev_password@localhost:5433/miniapp")
     jwt_secret: str = Field(default="dev-only-change-me-before-production")
     jwt_expires_hours: int = Field(default=8)
+    admin_access_expires_minutes: int = Field(default=15)
+    admin_refresh_expires_days: int = Field(default=7)
+    redis_url: str = Field(default="redis://localhost:6380/0")
+    admin_refresh_cookie_name: str = Field(default="wonderq_admin_refresh")
+    admin_refresh_cookie_secure: bool = Field(default=False)
+    admin_refresh_cookie_path: str = Field(default="/api/admin/auth")
+    admin_permission_cache_seconds: int = Field(default=300)
+    admin_login_rate_limit: int = Field(default=5)
+    admin_login_rate_window_seconds: int = Field(default=60)
     log_level: str = Field(default="info")
     port: int = Field(default=4000)
     cors_origins: str = Field(default="*")