refactor: 각 어댑터터별 리펙토링 진행

docs/registries/env-keys.yaml

@@ -1672,9 +1672,12 @@ env_keys:
     required_test: idempotency-contract:ttl-applied
 
   - name: APP_IDEMPOTENCY_PROVIDER
+    # postgresql selects the owner-safe V2 store on the primary data source. It had no value here
+    # while the store, its schema stream and its integration suite all existed, so the capability
+    # could only be reached by constructing it in a test.
     type: enum
     default: jdbc
-    allowed_values: [disabled, jdbc, redis]
+    allowed_values: [disabled, jdbc, redis, postgresql]
     classification: public-config
     required: false
     reload_policy: restart-only
@@ -4970,6 +4973,21 @@ env_keys:
     compatibility_impact: behavior-change
     required_test: adapter-contract:notification-callback-body-bound
 
+  - name: APP_NOTIFICATION_PLATFORM_CALLBACK_TRUSTED_PROXIES
+    # source: NTF-001 — peers whose forwarded headers may be believed when reconstructing the URL a
+    # provider signed. Empty means the resolver uses what the container observed; honouring
+    # forwarded headers unconditionally would let any caller pick the URL its signature is checked
+    # against, which defeats the signature.
+    type: csv
+    default: ""
+    allowed_values: null
+    classification: security-relevant
+    required: false
+    reload_policy: restart-only
+    owner_branch: worktree-notification-platform
+    validation: none
+    compatibility_impact: behavior-change
+    required_test: adapter-contract:notification-callback-url-resolution
   - name: APP_NOTIFICATION_PLATFORM_CALLBACK_REPLAY_SKEW
     # source: NTF-025 — how far a callback timestamp may differ from local time before it is treated as a replay
     type: duration