Adam Moussa f2a0692577 Harden summary-PDF endpoint per cross-review ... Address GPT-4.1 cross-review of the IAM change: - Validate the week param (YYYY-WNN) and the DynamoDB-sourced PDF key shape before presigning, so a tampered SUMMARY record can't mint URLs for other report files (payroll CSVs). - Narrow the IAM resource from reports/* to reports/*/weekly-summary-*.pdf — least privilege over the bucket. - Reuse a module-level S3 client; name the URL TTL constant. - Distinguish "week not found" from "PDF key missing" 404s. - Tests: malformed-week 400 and tampered-key 500 (asserts no presign).		2026-06-05 18:44:25 -04:00
..
handler.py	Harden summary-PDF endpoint per cross-review	2026-06-05 18:44:25 -04:00
requirements.txt	Initial commit: meal ordering automation system (#1)	2026-05-12 18:25:15 -04:00