feat(worker): enforce durable trust state

internal/distworker/config.go

@@ -111,8 +111,11 @@ func (c HTTPConfig) IsListenConfigured() bool {
 // Config holds the local worker connection settings.
 // Runtime settings are delivered by the control plane over websocket.
 type Config struct {
-	URL   string
-	Token string
+	URL            string
+	Token          string
+	BootstrapToken string
+	StateFile      string
+	WorkerID       string
 
 	// MaxConcurrency caps the worker pool size and the number of dispatcher
 	// goroutines. A value <= 0 falls back to DefaultMaxConcurrency.
@@ -127,9 +130,12 @@ type Config struct {
 // ConfigFromEnv creates a Config from environment variables.
 func ConfigFromEnv() Config {
 	return Config{
-		URL:   normalizeURL(os.Getenv("RSMON_URL")),
-		Token: os.Getenv("RSMON_TOKEN"),
-		HTTP:  HTTPConfigFromEnv(),
+		URL:            normalizeURL(os.Getenv("RSMON_URL")),
+		Token:          os.Getenv("RSMON_TOKEN"),
+		BootstrapToken: os.Getenv("RSMON_BOOTSTRAP_TOKEN"),
+		StateFile:      strings.TrimSpace(os.Getenv("RSMON_STATE_FILE")),
+		WorkerID:       strings.TrimSpace(os.Getenv("RSMON_WORKER_ID")),
+		HTTP:           HTTPConfigFromEnv(),
 	}
 }