Use typed Settings for canonical asset retention

app/security/assets.py

@@ -11,6 +11,7 @@ from typing import Any
 from sqlalchemy import select
 from sqlalchemy.exc import IntegrityError
 
+from app.core.config import Settings
 from app.security.database import SecurityDatabase
 from app.security.models import CanonicalMediaAsset
 
@@ -27,8 +28,9 @@ class CanonicalAssetService:
     ``CleanupService`` so every consumer receives the same traversal checks.
     """
 
-    def __init__(self, database: SecurityDatabase) -> None:
+    def __init__(self, database: SecurityDatabase, settings: Settings | None = None) -> None:
         self.database = database
+        self.settings = settings
 
     async def register_output(
         self,
@@ -167,7 +169,9 @@ class CanonicalAssetService:
         Project-attached assets are retained. Missing files are reconciled from
         the database so stale asset IDs cannot accumulate indefinitely.
         """
-        hours = max(1, int(os.getenv("MEDIA_ASSET_RETENTION_HOURS", "24")))
+        hours = self.settings.asset_retention_hours if self.settings is not None else max(
+            1, int(os.getenv("MEDIA_ASSET_RETENTION_HOURS", "24"))
+        )
         cutoff = datetime.now(timezone.utc) - timedelta(hours=hours)
         removed = 0
         async with self.database.session() as session: