perf: keep authenticated web reads responsive

[seonghobae]

Outcome

• moves blocking commitment, Naruon calendar, relationship-verification, and report scoring work off the ASGI event loop
• releases the asyncpg connection while external relationship verification is in flight
• fixes the runtime-only TEPP API key configuration used by application startup
• applies the existing /api/lineage landing ABAC, ordering, node limit, and edge bound in PostgreSQL instead of loading all 43,189 authorized runtime rows before limiting in Python

Verification

• 71 passed across lineage ingestion, relation verification, period report, config, k6 contract, and public-docstring suites
• actual Keycloak-authenticated k6 against the fully migrated local Compose PostgreSQL/Valkey/orchestrator stack; aggregate evidence only; zero HTTP errors at 1/10/25 VUs
• before (10 s): VU1 median/p95/p99 809.03 ms / 6.18 s / 6.22 s, 0.618 req/s; VU10 4.63 s / 20.10 s / 20.46 s, 1.531 req/s; VU25 25.35 s / 33.59 s / 36.30 s, 1.046 req/s, 6 iterations
• after (10 s): VU1 179.52 ms / 3.43 s / 4.17 s, 1.067 req/s; VU10 1.88 s / 20.80 s / 21.04 s, 1.487 req/s; VU25 22.03 s / 29.78 s / 31.38 s, 2.411 req/s, 25 iterations
• exact behavioral code head a700374e, 4 VUs for 60 s: 36 iterations, 110 HTTP requests, 0 failures; overall median/p95/p99 392.15 ms / 8.82 s / 9.68 s, 1.644 req/s; posts/lineage read 3.21 s / 9.14 s / 9.89 s; Ask polling 41.39 ms / 413.16 ms / 462.65 ms

All 36 exact-head iterations observed the Ask lifecycle state. The remaining reader tail is recorded explicitly and is not presented as an SLO or capacity ceiling. The existing harness's #627 token renewal is preserved.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: a45ebd11-4df8-4303-9305-0299dd475473

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}