Перенесены секреты из .env в SM

codebase/backend/deployment/scripts/smoke.sh

@@ -2,11 +2,23 @@
 set -eu
 cd "$(dirname "$0")/../.."
 
-ENV_FILE=${ENV_FILE:-.env}
-./scripts/validate-env "$ENV_FILE"
+CONFIG_FILE=${CONFIG_FILE:-.env}
+SECRETS_LAUNCHER=${SECRETS_LAUNCHER:-deployment/secrets/han-secrets}
+if [ "${HAN_SECRETS_ACTIVE:-0}" != "1" ]; then
+  [ -x "$SECRETS_LAUNCHER" ] || {
+    echo "Secret launcher is required: $SECRETS_LAUNCHER" >&2
+    exit 66
+  }
+  exec "$SECRETS_LAUNCHER" run --config "$CONFIG_FILE" -- "$0" "$@"
+fi
+if [ -n "${HAN_RUNTIME_SECRET_MANIFEST:-}" ]; then
+  ./scripts/validate-env "$CONFIG_FILE" --runtime-manifest "$HAN_RUNTIME_SECRET_MANIFEST"
+else
+  ./scripts/validate-env "$CONFIG_FILE" --runtime-env
+fi
 
 env_value() {
-  python3 - "$ENV_FILE" "$1" <<'PY'
+  python3 - "$CONFIG_FILE" "$1" <<'PY'
 import sys
 from pathlib import Path