OTP supervisor for the break_glass_ex library.

Add this supervisor to your host application's supervision tree before your endpoint or router to ensure all ETS tables exist before the first authentication request:

children = [
  # ... database repos, etc. ...
  {BreakGlass.Supervisor, []},
  MyAppWeb.Endpoint
]

The supervisor starts RateLimiter, TokenStore, and OtpStore in that order using a :one_for_one strategy. It validates required configuration keys at startup and raises ArgumentError if any are missing, preventing the application from booting in a misconfigured state.

Required Configuration

The following keys must be present under config :break_glass_ex:

• :email — the break-glass email address (String.t())
• :password_hash — the bcrypt hash of the break-glass password (String.t())
• :user_provider — the module implementing BreakGlass.UserProvider (module())

If any required key is absent, an ArgumentError is raised listing all missing keys before any child GenServer is started:

ArgumentError: BreakGlass: missing required configuration keys: [:email, :password_hash].
Add them under `config :break_glass_ex` in your runtime.exs.

Optional Configuration

• :allowed_ips — list of exact IPs or CIDR ranges allowed to authenticate (default: ["127.0.0.1", "::1"]). If absent, a Logger.warning is emitted at startup.