curl -X GET https://localhost:3100/api/alerts/config \
  -H 'Authorization: Bearer fn_sess_abc123def456'

{
  "toggles": {
    "prompt_drift": true,
    "prompt_size": true,
    "budget_warning": true,
    "budget_exceeded": true,
    "onchain_denied": true,
    "rate_limit_hit": true,
    "anomalous_volume": true,
    "new_endpoint": true,
    "time_anomaly": true,
    "high_severity_denied_action": true
  },
  "retention_days": 30
}