ursa.config

Packaged Ursa config files.

ursa.default.yaml ships inside the wheel and is loaded via importlib.resources as the final fallback in the search order. It contains no credentials — only role-to-creds mappings and prefixes. The R2 backend resolves credentials at runtime via constellation_utils.secrets.r2_*() based on the YAML’s creds selector; profile routing (testing vs production) is constellation- utils’ concern, not Ursa’s.