-- Mutable provider configuration is relational runtime state. Values are
-- intentionally plaintext in this first functional migration; at-rest
-- encryption and key rotation are separate hardening work.
create table if not exists platform_runtime_settings (
  setting_key text primary key,
  setting_value text not null,
  revision bigint not null default 1 check (revision > 0),
  updated_at timestamptz not null default now()
);

create index if not exists platform_runtime_settings_updated_at_idx
  on platform_runtime_settings(updated_at desc);