feat(secrets): seal-secret.sh (credential-free) + fuzefront-secrets scaffold - #92

Merged

izzywdev merged 6 commits into

feat/billing-secret-tooling

Jun 23, 2026

Commits on Jun 22, 2026

feat(secrets): credential-free seal-secret.sh + fuzefront-secrets SealedSecret scaffold

AppHub Developer
and
claude
committed
f68e0c8
chore(secrets): ASCII-only comments in sealed manifest (avoid cp1252/tool encoding issues)
AppHub Developer
committed
c1f5306
refactor(secrets): per-service billing-secrets (least privilege) instead of shared blob
AppHub Developer
committed
3a9f0c0
feat(billing): enable + complete billing deploy (ingress carve-out, billing_svc role, DB, secrets)

AppHub Developer
and
claude
committed
6b3e70c
build(billing-client): tsup dual-build (ESM+CJS) for host static export resolution

AppHub Developer
and
claude
committed
785c727
docs(deploy): lock path-based service URL convention (/api/v1/<svc>, internal-by-default)

AppHub Developer
and
claude
committed
6ec4216