remove user-secrets approach & prepare a pilot deploy

2026-07-28 23:18:54 +03:30
parent 630c7907ec
commit 5885280b49
28 changed files with 639 additions and 142 deletions
@@ -42,7 +42,7 @@ public class SeedDataBase : ISeedDataBase
    }

    // The bootstrap admin is config-driven, never a committed credential: it is created only when both
-    // Seed:AdminUsername and Seed:AdminPassword are supplied (via user-secrets in Development, environment
+    // Seed:AdminUsername and Seed:AdminPassword are supplied (via the environment-specific appsettings file, environment
    // variables in a deployment). With neither configured — the default for Testing and any fresh boot —
    // no admin account is created, so no well-known password ever lands in a real database. Day-to-day
    // admins reach the backoffice through the phone-OTP demo seeds (Development) or are provisioned