fix: CI workflow, password reset flow, health/limits in services, session refactor, dead mixin stub cleanup

backend/configs-service/Cargo.toml

@@ -10,9 +10,10 @@ path = "src/lib.rs"
 [dependencies]
 common = { path = "../common" }
 axum = { version = "0.8", features = ["macros"] }
+tower-http = { version = "0.7", features = ["trace"] }
 tokio = { version = "1", features = ["rt-multi-thread", "macros"] }
 tracing = "0.1"
-tracing-subscriber = "0.3"
+tracing-subscriber = { version = "0.3", features = ["env-filter"] }
 serde = { version = "1", features = ["derive"] }
 serde_json = "1"
 sqlx = { version = "0.9", default-features = false, features = ["runtime-tokio", "tls-rustls", "postgres", "uuid", "chrono", "json", "macros", "migrate"] }

backend/configs-service/src/lib.rs

@@ -13,6 +13,7 @@ use common::internal::{InternalKey, require_internal_key};
 use config::Config;
 use showcase::profiles::ProfileSource;
 use std::sync::Arc;
+use tower_http::trace::TraceLayer;
 
 pub fn build_app(pool: sqlx::PgPool, cfg: &Config, profiles: Arc<dyn ProfileSource>) -> Router {
     let slots_state = slots::handlers::SlotsState { pool: pool.clone() };
@@ -52,4 +53,5 @@ pub fn build_app(pool: sqlx::PgPool, cfg: &Config, profiles: Arc<dyn ProfileSour
     Router::new()
         .route("/health", get(|| async { "ok" }))
         .merge(api)
+        .layer(TraceLayer::new_for_http())
 }

backend/configs-service/src/main.rs

@@ -1,7 +1,12 @@
 #[tokio::main]
 async fn main() -> anyhow::Result<()> {
     dotenvy::dotenv().ok();
-    tracing_subscriber::fmt::init();
+    tracing_subscriber::fmt()
+        .with_env_filter(
+            tracing_subscriber::EnvFilter::try_from_default_env()
+                .unwrap_or_else(|_| tracing_subscriber::EnvFilter::new("info")),
+        )
+        .init();
     let cfg = configs_service::config::Config::from_env()?;
     cfg.validate()?;
     let pool = sqlx::PgPool::connect(&cfg.database_url).await?;