Add Prometheus support and expose actuator

Add Micrometer Prometheus registry to Gradle dependencies and enable Prometheus metrics export. Expose the prometheus actuator endpoint via management.endpoints.web.exposure.include and allow all /actuator/** requests in SecurityConfig so metrics can be scraped. Also add a MONITORING.md placeholder.

Author: vitorhugo-java

MONITORING.md

@@ -84,6 +84,7 @@ dependencies {
     implementation 'at.favre.lib:bcrypt:0.10.2'
     implementation 'uk.co.conoregan:themoviedbapi:2.1.1'
     implementation 'org.springframework.boot:spring-boot-starter-actuator'
+    implementation 'io.micrometer:micrometer-registry-prometheus'
     implementation 'org.springframework.boot:spring-boot-starter-graphql'
     implementation 'org.springframework.boot:spring-boot-starter-web'
     implementation 'org.springframework.boot:spring-boot-starter-data-jpa'

build.gradle

@@ -53,7 +53,8 @@ public SecurityFilterChain configure(HttpSecurity http) throws Exception {
                 .cors(withDefaults())
                 .csrf(csrf -> csrf.disable())
                 .authorizeHttpRequests(auth -> {
-                    auth.requestMatchers("/", "/graphiql", "/graphiql/**", "/favicon.ico", "/actuator/health").permitAll();
+                    auth.requestMatchers("/", "/graphiql", "/graphiql/**", "/favicon.ico").permitAll();
+                    auth.requestMatchers("/actuator/**").permitAll();
                     auth.requestMatchers(org.springframework.http.HttpMethod.OPTIONS, "/**").permitAll();
                     auth.anyRequest().authenticated();
                 })

src/main/java/com/espacogeek/geek/config/SecurityConfig.java

@@ -48,8 +48,9 @@ spring.mail.properties.mail.smtp.timeout=5000
 spring.mail.properties.mail.smtp.writetimeout=5000
 
 # ===== Actuator / Management Endpoints =====
-management.endpoints.web.exposure.include=health,info
+management.endpoints.web.exposure.include=health,info,prometheus
 management.endpoint.health.show-details=always
+management.metrics.export.prometheus.enabled=true
 
 # Application settings
 app.name=${APP_NAME:EspacoGeek}