Fix HTTP deployment flow and redesign bindings workspace

app/config.py

@@ -33,7 +33,7 @@ class Settings(BaseSettings):
     sentinel_hmac_secret: str = Field(alias="SENTINEL_HMAC_SECRET", min_length=32)
     admin_password: str = Field(alias="ADMIN_PASSWORD", min_length=8)
     admin_jwt_secret: str = Field(alias="ADMIN_JWT_SECRET", min_length=16)
-    trusted_proxy_ips: tuple[str, ...] = Field(default_factory=tuple, alias="TRUSTED_PROXY_IPS")
+    trusted_proxy_ips_raw: str = Field(default="", alias="TRUSTED_PROXY_IPS")
     sentinel_failsafe_mode: Literal["open", "closed"] = Field(
         default="closed",
         alias="SENTINEL_FAILSAFE_MODE",
@@ -62,17 +62,10 @@ class Settings(BaseSettings):
     def normalize_downstream_url(cls, value: str) -> str:
         return value.rstrip("/")
 
-    @field_validator("trusted_proxy_ips", mode="before")
-    @classmethod
-    def split_proxy_ips(cls, value: object) -> tuple[str, ...]:
-        if value is None:
-            return tuple()
-        if isinstance(value, str):
-            parts = [item.strip() for item in value.split(",")]
-            return tuple(item for item in parts if item)
-        if isinstance(value, (list, tuple, set)):
-            return tuple(str(item).strip() for item in value if str(item).strip())
-        return (str(value).strip(),)
+    @property
+    def trusted_proxy_ips(self) -> tuple[str, ...]:
+        parts = [item.strip() for item in self.trusted_proxy_ips_raw.split(",")]
+        return tuple(item for item in parts if item)
 
     @cached_property
     def trusted_proxy_networks(self):