Make live sync configurable

docs/architecture.md

@@ -91,11 +91,12 @@ as signed-list-ready records. The bootstrap can pull
 certificate-flow metadata over Iroh with `geth ssh cert sync <node-id>` when the
 peer grants `ssh_cert.sync` on `resource:ssh:certs`, and revocation metadata with
 `geth ssh revocation sync <node-id>` when the peer grants `ssh_revocation.sync`
-on `resource:ssh:revocations`. The daemon also runs a 30-second background
+on `resource:ssh:revocations`. The daemon also runs a configurable background
 live-sync tick for known peers and records per-peer high-water cursors in
 `module_state`, so repeated ticks request only records at or beyond the last
-remote cursor. Boundary duplicates are harmless because records are keyed by
-stable IDs and inserted with replace semantics.
+remote cursor. The default interval is 30 seconds and can be changed under
+`[sync]` in `config.toml`. Boundary duplicates are harmless because records are
+keyed by stable IDs and inserted with replace semantics.
 Before issuing per-module pulls, the daemon can request an authorized sync
 status summary over the same protected Iroh control ALPN. The serving peer
 validates endpoint/card binding and returns only watermarks for streams where

docs/roadmap.md

@@ -254,6 +254,8 @@ resource-scoped capability decisions.
     `geth ssh revocation sync <node-id>`.
   - `[x]` The daemon background live-sync loop refreshes known peers without a
     manual command.
+  - `[x]` Background live-sync can be disabled or retuned with `[sync]`
+    `live_sync_enabled` and `live_sync_interval_ms`.
   - `[x]` SSH metadata live-sync stores per-peer high-water cursors in
     `module_state` and requests only records at or beyond the cursor.
   - `[x]` Local SSH cert request/read/approve/import commands can enforce