Adam Moussa 55a647537c Require Secrets Manager key for Anthropic client ... Remove the silent fallback to a plaintext ANTHROPIC_API_KEY env var in both email processors; require ANTHROPIC_API_KEY_SECRET_ARN and raise if absent so a misconfigured deploy fails loudly instead of using an unmanaged key. Adapted from f175323 on security/sweep-2026-06-17. The From-header sender-domain allowlist from that commit is intentionally dropped: the From header is spoofable (INFRA-107, confirmed critical) and sender authentication is being reworked in a separate PR. Refs: INFRA-107		2026-07-15 19:29:41 -04:00
..
email_processor	Require Secrets Manager key for Anthropic client	2026-07-15 19:29:41 -04:00
web_ui	Update boto3 requirement in /lambdas/wo/web_ui (#92)	2026-07-14 09:04:31 -04:00