feat(kubernetes): queue durable D037 auto repair

apps/api/src/core/config.py

@@ -981,6 +981,31 @@ class Settings(BaseSettings):
             "then enqueue them for the existing check-mode worker."
         ),
     )
+    ENABLE_KUBERNETES_CONTROLLED_CANDIDATE_WORKER: bool = Field(
+        default=False,
+        description=(
+            "True only in the dedicated Kubernetes executor broker; API, signal "
+            "worker, and Ansible broker must keep this disabled."
+        ),
+    )
+    KUBERNETES_CONTROLLED_CANDIDATE_INTERVAL_SECONDS: int = Field(
+        default=30,
+        ge=5,
+        le=300,
+        description="Dedicated Kubernetes candidate claim interval.",
+    )
+    KUBERNETES_CONTROLLED_CANDIDATE_BATCH_LIMIT: int = Field(
+        default=1,
+        ge=1,
+        le=1,
+        description="Single-writer Kubernetes candidate batch size.",
+    )
+    KUBERNETES_CONTROLLED_CANDIDATE_STARTUP_SLEEP_SECONDS: int = Field(
+        default=15,
+        ge=0,
+        le=300,
+        description="Bounded startup delay for the dedicated executor broker.",
+    )
     ENABLE_SECURITY_CONTROL_PLANE_MAINTENANCE_WORKER: bool = Field(
         default=False,
         description=(