feat: add advisor rollout gate and rollback playbook

app/core/config.py

@@ -58,6 +58,10 @@ class Settings(BaseSettings):
     worker_lease_seconds: int = Field(default=60, gt=0)
     worker_retry_limit: int = Field(default=3, ge=0)
     worker_poll_seconds: float = Field(default=1, gt=0)
+    # 投顾灰度默认关闭，只有显式开启并配置客户白名单后才限制客户流量。
+    # 管理员角色始终可进入，便于审核、发布和故障处置。
+    advisor_rollout_enabled: bool = False
+    advisor_rollout_customer_ids: str = ""
 
     model_config = SettingsConfigDict(env_file=".env", env_file_encoding="utf-8", extra="ignore")