feat: add internal workbench admin api

internal/config/config.go

@@ -51,6 +51,8 @@ type AuthConfig struct {
 	RequiredAPIKey      bool     `json:"required_api_key"`
 	SkipSessionInDev    bool     `json:"skip_session_in_dev"`
 	TrustedInternalAddr string   `json:"trusted_internal_addr"`
+	InternalServiceName string   `json:"internal_service_name"`
+	InternalSecret      string   `json:"internal_secret"`
 }
 
 func Load() (*Config, error) {
@@ -109,6 +111,8 @@ func applyEnv(cfg *Config) {
 	setString(&cfg.Kafka.ClientID, "IM_WORKBENCH_KAFKA_CLIENT_ID")
 	setString(&cfg.Auth.SessionKeyPattern, "IM_WORKBENCH_SESSION_KEY_PATTERN")
 	setString(&cfg.Auth.TrustedInternalAddr, "IM_WORKBENCH_TRUSTED_INTERNAL_ADDR")
+	setString(&cfg.Auth.InternalServiceName, "IM_WORKBENCH_INTERNAL_SERVICE_NAME")
+	setString(&cfg.Auth.InternalSecret, "IM_WORKBENCH_INTERNAL_SECRET")
 	if brokers := strings.TrimSpace(os.Getenv("IM_WORKBENCH_KAFKA_BROKERS")); brokers != "" {
 		cfg.Kafka.Brokers = splitCSV(brokers)
 	}