Function apply_configuration 

pub async fn apply_configuration(
    infra: &InfraContext<'_>,
    token: &str,
    vault_base_url: &str,
    k8s_api_url: &str,
    gitea_token: &str,
    configuration: Value,
    dry_run: bool,
    overwrite: bool,
) -> Result<CfsConfigurationResponse, Error>

Apply a single SAT configurations[] entry.

CFS configurations are not HSM-group-scoped so no caller-access check is performed here. The backend’s own RBAC layer enforces CSM-level authorization.