M39: harden application and acceptance gates

deploy/unraid/configure-env.sh

@@ -17,12 +17,12 @@ app_secret="$(openssl rand -hex 32)"
 n8n_key="$(openssl rand -hex 32)"
 n8n_password="$(openssl rand -hex 24)"
 callback_token="$(openssl rand -hex 32)"
+trigger_token="$(openssl rand -hex 32)"
 mcp_token="$(openssl rand -hex 32)"
 
 sed -i \
   -e "s|^MOBILITYOPS_ENV=.*|MOBILITYOPS_ENV=production|" \
   -e "s|^MOBILITYOPS_PUBLIC_URL=.*|MOBILITYOPS_PUBLIC_URL=${public_url}|" \
-  -e "s|^MOBILITYOPS_API_URL=.*|MOBILITYOPS_API_URL=${public_url}|" \
   -e "s|^DATABASE_URL=.*|DATABASE_URL=postgresql+psycopg://mobilityops:${db_password}@db:5432/mobilityops|" \
   -e "s|^POSTGRES_PASSWORD=.*|POSTGRES_PASSWORD=${db_password}|" \
   -e "s|^APP_SECRET=.*|APP_SECRET=${app_secret}|" \
@@ -30,11 +30,12 @@ sed -i \
   -e "s|^N8N_ENCRYPTION_KEY=.*|N8N_ENCRYPTION_KEY=${n8n_key}|" \
   -e "s|^N8N_BASIC_AUTH_PASSWORD=.*|N8N_BASIC_AUTH_PASSWORD=${n8n_password}|" \
   -e "s|^MOBILITYOPS_CALLBACK_TOKEN=.*|MOBILITYOPS_CALLBACK_TOKEN=${callback_token}|" \
+  -e "s|^MOBILITYOPS_WEBHOOK_TRIGGER_TOKEN=.*|MOBILITYOPS_WEBHOOK_TRIGGER_TOKEN=${trigger_token}|" \
   -e "s|^KNOWLEDGE_PROVIDER=.*|KNOWLEDGE_PROVIDER=demo|" \
   -e "s|^MCP_HUB_REGISTRATION_ENABLED=.*|MCP_HUB_REGISTRATION_ENABLED=false|" \
   -e "s|^MCP_HUB_SERVICE_TOKEN=.*|MCP_HUB_SERVICE_TOKEN=${mcp_token}|" \
   .env
 
-unset db_password app_secret n8n_key n8n_password callback_token mcp_token
+unset db_password app_secret n8n_key n8n_password callback_token trigger_token mcp_token
 
 echo "Created server .env for ${public_url} using n8n webhook ${n8n_webhook_url}"