chore: configure secrets for ported Gemini workflows

[groupthinking]

Required Secrets (manual — from YOUTUBE-EXTENSION)

The ported Gemini workflows (PR #107, now merged) need these secrets configured:

Secrets to Add

Go to: Settings → Secrets and variables → Actions → Repository secrets

Secret	Required By	Where to Get
GEMINI_API_KEY	gemini-dispatch, gemini-invoke, gemini-review	Google AI Studio
GOOGLE_API_KEY	gemini-invoke	Same as above or Google Cloud Console
APP_ID	gemini-dispatch (GitHub App)	GitHub App settings page
APP_PRIVATE_KEY	gemini-dispatch (GitHub App)	GitHub App settings → Private keys

Variables Already Configured ✅

Variable	Value
GEMINI_MODEL	gemini-2.5-pro
GEMINI_CLI_VERSION	latest

Optional GCP Variables (for Vertex AI path)

These are optional — workflows fall back gracefully when not set:

Variable	Purpose
GOOGLE_CLOUD_PROJECT	GCP project ID
GOOGLE_CLOUD_LOCATION	GCP region (e.g., us-central1)
SERVICE_ACCOUNT_EMAIL	GCP service account
GCP_WIF_PROVIDER	Workload Identity Federation provider
GOOGLE_GENAI_USE_VERTEXAI	Set to 'true' to use Vertex AI instead of API key

[github-actions]

👋 Thanks for opening this issue! It has been automatically labeled for triage.

[groupthinking]

All required secrets are now configured:

• GEMINI_API_KEY ✅ (set 2026-03-20)
• GOOGLE_API_KEY ✅ (set by user 2026-03-20)
• GCP_PROJECT_ID ✅ (set 2026-02-05)
• GCP_SA_KEY ✅ (set 2026-02-05)

Variables:

• GEMINI_MODEL = gemini-2.5-pro ✅
• GEMINI_CLI_VERSION = latest ✅
• COPILOT_AGENT_FIREWALL_ENABLED = false ✅

Optional (not set):

• APP_ID / APP_PRIVATE_KEY — GitHub App for elevated Gemini dispatch permissions. Workflows gracefully skip if not set.