FLOWIP-010: Resolved runtime configuration foundations

[rocketpages]

Checklist

• I read CONTRIBUTING.md
• All commits are signed off (DCO): git commit -s
• I ran: cargo fmt --all
• I ran: cargo test --workspace

Summary

Adds a resolved runtime configuration foundation and read-only config inspection so operators can see what settings are active, where they came from, and what was recorded for a run. This centralises runtime knobs without adding mutation or secret-provider scope.

• Adds typed runtime config with scope/source provenance.
• Threads config through flow build and stage resources.
• Records redacted effective config in run manifests.
• Adds /api/config/* read endpoints behind control-plane auth.
• Adds obzenflow config get for offline and live inspection.