feat(iwooos): run wazuh posture receipt chain

apps/api/src/core/config.py

@@ -650,6 +650,21 @@ class Settings(BaseSettings):
             "routes remain blocked by catalog and guardrails."
         ),
     )
+    ENABLE_IWOOOS_WAZUH_MANAGER_POSTURE_EXECUTOR: bool = Field(
+        default=False,
+        description=(
+            "True=periodically enqueue the allowlisted no-write Wazuh manager "
+            "posture playbook into the existing Ansible controlled executor."
+        ),
+    )
+    IWOOOS_WAZUH_MANAGER_POSTURE_FRESHNESS_HOURS: int = Field(
+        default=6,
+        ge=1,
+        le=24,
+        description=(
+            "Minimum freshness window between Wazuh manager posture executor runs."
+        ),
+    )
     AWOOOP_ANSIBLE_CONTROLLED_APPLY_ALLOWED_RISK_LEVELS: str = Field(
         default="low,medium,high",
         description=(