Adam Moussa 55a647537c Require Secrets Manager key for Anthropic client ... Remove the silent fallback to a plaintext ANTHROPIC_API_KEY env var in both email processors; require ANTHROPIC_API_KEY_SECRET_ARN and raise if absent so a misconfigured deploy fails loudly instead of using an unmanaged key. Adapted from f175323 on security/sweep-2026-06-17. The From-header sender-domain allowlist from that commit is intentionally dropped: the From header is spoofable (INFRA-107, confirmed critical) and sender authentication is being reworked in a separate PR. Refs: INFRA-107		2026-07-15 19:29:41 -04:00
..
po	Require Secrets Manager key for Anthropic client	2026-07-15 19:29:41 -04:00
wo	Require Secrets Manager key for Anthropic client	2026-07-15 19:29:41 -04:00