CI guard: runtime code reads only TRUSTED_SERVER__ environment names #1580

Summary

CI guard: runtime code reads only TRUSTED_SERVER__ environment names.

Part of #1558, server-side identity on every adapter. Plan ID A9, planned in wave 5 (MVP: Fastly and Axum); priority P2, size XS. Design: spec; order and dependencies: plan.

Requirements

AX-2 Managed config and secrets

Config and secrets load from AWS stores through EdgeZero store providers. Environment overrides use the full TRUSTED_SERVER__ prefix only.

Current state

What the code does today, from the design's survey at the revisions it names:

• AX-2: main reads TRUSTED_SERVER_CONFIG_* and TRUSTED_SERVER_SECRET_*, which Initialize native TS from prepared immutable stores #1528 removes; the RC adds TS_NATIVE_GEO_PROFILE_FILE, TS_NATIVE_BINDINGS_TOML and TS_APPCONFIG_TOKEN.

Acceptance criteria

• AX-2: An Axum startup test loads config and secrets through the providers in Add native AWS store providers edgezero#414, and no runtime code reads a TS_* or TRUSTED_SERVER_CONFIG_* / TRUSTED_SERVER_SECRET_* name

Dependencies

Blocked by:

• Serve Axum in production mode from main #1573 Serve Axum in production mode from main (new in this plan)