feat: add AppSettings model for centralized configuration

apps/common/apps.py

@@ -8,6 +8,6 @@ class CommonConfig(AppConfig):
     def ready(self) -> None:
         from apps.common.audit import register_audited_models
 
-        from .models import SiteLabel
+        from .models import AppSettings, SiteLabel
 
-        register_audited_models(SiteLabel)
+        register_audited_models(SiteLabel, AppSettings)

apps/common/migrations/0009_appsettings.py

@@ -0,0 +1,24 @@
+# Generated by Django 6.0.7 on 2026-08-05 05:47
+
+from django.db import migrations, models
+
+
+class Migration(migrations.Migration):
+    dependencies = [
+        ("common", "0008_sitelabel_per_key"),
+    ]
+
+    operations = [
+        migrations.CreateModel(
+            name="AppSettings",
+            fields=[
+                ("id", models.BigAutoField(auto_created=True, primary_key=True, serialize=False, verbose_name="ID")),
+                ("key", models.CharField(max_length=255, unique=True)),
+                ("value", models.TextField(blank=True)),
+                ("description", models.TextField(blank=True)),
+                ("is_active", models.BooleanField(default=True)),
+                ("created_at", models.DateTimeField(auto_now_add=True)),
+                ("updated_at", models.DateTimeField(auto_now=True)),
+            ],
+        ),
+    ]

apps/common/models.py

@@ -64,6 +64,26 @@ def __str__(self) -> str:
         return str(self.key)
 
 
+class AppSettings(models.Model):
+    """Per-key store for centralized application configuration.
+
+    Separate from `SiteLabel` (which is per-language UI copy): this is for
+    backend/operational settings, one row per key.
+    """
+
+    key = models.CharField(max_length=255, unique=True)
+    # Plain text, not JSONField: some values are stored as JSON-encoded
+    # strings, and callers are responsible for json.loads/json.dumps.
+    value = models.TextField(blank=True)
+    description = models.TextField(blank=True)
+    is_active = models.BooleanField(default=True)
+    created_at = models.DateTimeField(auto_now_add=True)
+    updated_at = models.DateTimeField(auto_now=True)
+
+    def __str__(self) -> str:
+        return str(self.key)
+
+
 class EditEvent(models.Model):
     """Append-only audit log for editor changes (M5.2).
 

pyproject.toml

@@ -26,7 +26,7 @@ dependencies = [
     "pyyaml>=6.0.3",
     "whitenoise>=6.12.0",
     "pyjwt>=2.12.0",
-    "cryptography>=49.0.0",
+    "cryptography>=50.0.0",
     "python-json-logger>=4.1.0",
 ]