CobaltConfig

The names of the product elements.

The name of the type.

Loads from the ambient config, returning failures rather than throwing.

Whether an unusable configuration is fatal is the composition root's call (Main does abort); keeping the failure as a value lets a test assert on a bad configuration without killing the JVM.

The config namespace.

Written out rather than derived for the same reason wolfram's is: AuthConfig is the one section with optional fields, and a derived reader would turn a missing secret into a parse error instead of the boot failure JwtVerifier.from produces with a sentence naming the field.