argoyle
c5e81cc6b5
Bring the auth and logging libs up to the otelsetup/authz_client standard: golangci-lint + .editorconfig + .testcoverage.yml + cliff.toml + renovate.json + CHANGELOG + CLAUDE.md + pre-commit and Release workflows. Replace the minimal test-only CI with a cache-based coverage-regression gate (PR test job restores main's baseline from the Actions cache; a non-gating post-merge coverage-baseline job records it) mirroring the services (ADR-0010 carve-out). Job names test/vulnerabilities preserved to match branch-protection contexts.
auth
Shared authentication primitives for Shiny backend services.
UserMiddleware(signingKey)— verifies the HMAC-signeduserheader the gateway propagates (ADR-0005) and injects the*Userinto the request context.FromContext(ctx)/User.HasRole(...)— read the authenticated user.MissingDeployedSecrets(env, secrets)— startup guard that fails closed when required secrets are empty instaging/production(ADR-0005/0006).
Replaces the byte-identical auth package and secrets_guard.go previously
copied into every service.