feat(api): add log_request_body_enabled feature flag support

Add runtime feature flag to control whether request bodies are stored
in logs. The Handler now accepts a Redis client to check the
log_request_body_enabled feature flag before persisting log records.

- Add logRequestBodyFeatureKey constant for feature flag
- Inject Redis client into Handler for feature flag lookups
- Strip request body from log records when feature is disabled
- Update tests to pass Redis client to NewHandler

internal/api/handler.go

@@ -1,6 +1,7 @@
 package api
 
 import (
+	"context"
 	"net/http"
 	"strconv"
 	"strings"
@@ -11,6 +12,7 @@ import (
 	groupx "github.com/ez-api/foundation/group"
 	"github.com/ez-api/foundation/provider"
 	"github.com/gin-gonic/gin"
+	"github.com/redis/go-redis/v9"
 	"gorm.io/gorm"
 )
 
@@ -18,10 +20,11 @@ type Handler struct {
 	db     *gorm.DB
 	sync   *service.SyncService
 	logger *service.LogWriter
+	rdb    *redis.Client
 }
 
-func NewHandler(db *gorm.DB, sync *service.SyncService, logger *service.LogWriter) *Handler {
-	return &Handler{db: db, sync: sync, logger: logger}
+func NewHandler(db *gorm.DB, sync *service.SyncService, logger *service.LogWriter, rdb *redis.Client) *Handler {
+	return &Handler{db: db, sync: sync, logger: logger, rdb: rdb}
 }
 
 // CreateKey is now handled by MasterHandler
@@ -463,7 +466,25 @@ func (h *Handler) IngestLog(c *gin.Context) {
 		return
 	}
 
+	if !h.logRequestBodyEnabled(c.Request.Context()) {
+		rec.RequestBody = ""
+	}
+
 	// By default, only metadata is expected; payload fields may be empty.
 	h.logger.Write(rec)
 	c.JSON(http.StatusAccepted, gin.H{"status": "queued"})
 }
+
+func (h *Handler) logRequestBodyEnabled(ctx context.Context) bool {
+	if h == nil || h.rdb == nil {
+		return true
+	}
+	raw, err := h.rdb.HGet(ctx, featuresKey, logRequestBodyFeatureKey).Result()
+	if err == redis.Nil || strings.TrimSpace(raw) == "" {
+		return true
+	}
+	if err != nil {
+		return true
+	}
+	return strings.EqualFold(raw, "true") || strings.EqualFold(raw, "1")
+}