docs(config): revamp configuration documentation for the two-category model
Rewrites the configuration docs around the post-#415 model (Bootstrap vs
Operational categories, plus the still-live env > file > db precedence):
- Configuration-Model (new): the concept hub — the two categories, how values
are resolved (categories decide WHERE a value may live; precedence decides
WHICH wins), vault://env://file:// secret references, the secret-vs-bootstrap
orthogonality with Timmy as the worked example, hot vs static, visibility,
the three bootstrap-only config files, required settings.
- Configuring-Local-Development (new): dev setup, config-example -> -development,
TMI_* overrides, the OAuth stub + login_hint, operational settings in dev.
- Bootstrapping-Production (new): the bootstrap-only skeleton, secret wiring +
three-phase resolution, first-run DB seeding, --import-legacy migration,
platform notes (OCI/ADB, Heroku, Kubernetes), worker bootstrap, a checklist.
- Managing-Operational-Settings (new, replaces Configuration-Management):
/admin/settings CRUD + reencrypt, the source field + 409-on-config-controlled,
runtime reconfiguration of Timmy/content sources, dbtool import flags.
- Configuration-Reference (rewritten): generated from the classification
registry via 'make generate-config-docs' — drift-guarded, never hand-edited.
- Configuration-Management and Config-Migration-Guide retired to redirect stubs.
- Sidebar updated; Content-Extractors page cross-linked.
Pairs with the dev/1.4.0 generator (EnvVar field + cmd/genconfigdocs).
docs: add feedback APIs reference, OOXML extractor guide, Oracle FK cleanup runbook
Three new wiki pages plus sidebar wiring:
- Feedback-APIs.md (#377): operator + tmi-ux developer reference for the
/usability_feedback and /threat_models/{id}/feedback endpoints. Covers
endpoint schemas, validation rules, the false-positive reason/subreason
taxonomy, the auto_generated/AI-content variant, retention semantics, and
sample analytics SQL.
- Content-Extractors-Limits-and-Overrides.md (#340): operator guide for
the OOXML extractor pipeline. Defaults table, hardcoded ceilings, env
var / YAML reference, per-user concurrency override workflow, full
reason-code list, and troubleshooting recipes.
- Oracle-Content-Feedback-FK-Cleanup.md (#390): one-shot DDL runbook for
dropping the dead-weight ON DELETE CASCADE on content_feedback in
production Oracle ADB.
Sidebar updated: Operation section gains the two operator pages, API
Reference section gains the feedback APIs page.