feat(ops/site-mappings): wire site domain mapping routes and monitoring DB

Register site-domain-mappings CRUD endpoints under the authenticated ops
router, add a monitoring_database config block (falling back to the main
ops database when unset) for the service to share the monitoring pool.

server/internal/ops/config/config.go

@@ -12,13 +12,14 @@ import (
 )
 
 type Config struct {
-	Server       sharedconfig.ServerConfig   `mapstructure:"server"`
-	Database     sharedconfig.DatabaseConfig `mapstructure:"database"`
-	Log          sharedconfig.LogConfig      `mapstructure:"log"`
-	JWT          JWTConfig                   `mapstructure:"jwt"`
-	DefaultAdmin DefaultAdminConfig          `mapstructure:"default_admin"`
-	AdminUsers   AdminUsersConfig            `mapstructure:"admin_users"`
-	IPRegion     IPRegionConfig              `mapstructure:"ip_region"`
+	Server             sharedconfig.ServerConfig   `mapstructure:"server"`
+	Database           sharedconfig.DatabaseConfig `mapstructure:"database"`
+	MonitoringDatabase sharedconfig.DatabaseConfig `mapstructure:"monitoring_database"`
+	Log                sharedconfig.LogConfig      `mapstructure:"log"`
+	JWT                JWTConfig                   `mapstructure:"jwt"`
+	DefaultAdmin       DefaultAdminConfig          `mapstructure:"default_admin"`
+	AdminUsers         AdminUsersConfig            `mapstructure:"admin_users"`
+	IPRegion           IPRegionConfig              `mapstructure:"ip_region"`
 }
 
 type JWTConfig struct {
@@ -77,6 +78,9 @@ func Load(path string) (*Config, error) {
 	if cfg.JWT.Secret == "" {
 		return nil, fmt.Errorf("jwt.secret is required (set jwt.secret in yaml or OPS_JWT_SECRET env)")
 	}
+	if cfg.MonitoringDatabase.DBName == "" {
+		cfg.MonitoringDatabase = cfg.Database
+	}
 
 	return &cfg, nil
 }