Перенесены секреты из .env в SM

codebase/backend/deployment/scripts/verify-observability.sh

@@ -1,5 +1,18 @@
 #!/usr/bin/env bash
 set -Eeuo pipefail
+cd "$(dirname "$0")/../.."
+CONFIG_FILE="${CONFIG_FILE:-.env}"
+SECRETS_LAUNCHER="${SECRETS_LAUNCHER:-deployment/secrets/han-secrets}"
+
+if [[ "${HAN_SECRETS_ACTIVE:-0}" != 1 ]]; then
+  [[ -x "$SECRETS_LAUNCHER" ]] || {
+    echo "Secret launcher is required: $SECRETS_LAUNCHER" >&2
+    exit 66
+  }
+  exec "$SECRETS_LAUNCHER" run --config "$CONFIG_FILE" -- "$0" "$@"
+fi
+
+compose() { docker compose --env-file "$CONFIG_FILE" "$@"; }
 
 NETWORK="${OBSERVABILITY_NETWORK:-han-chat-observability}"
 COLLECTOR_SERVICE="${COLLECTOR_SERVICE:-otel-collector}"
@@ -8,7 +21,7 @@ errors=0
 ok() { printf 'OK   %s\n' "$*"; }
 fail() { printf 'FAIL %s\n' "$*" >&2; errors=$((errors + 1)); }
 
-collector_id="$(docker compose ps -q "$COLLECTOR_SERVICE" 2>/dev/null || true)"
+collector_id="$(compose ps -q "$COLLECTOR_SERVICE" 2>/dev/null || true)"
 if [[ -n "$collector_id" ]] &&
   [[ "$(docker inspect --format '{{.State.Status}}' "$collector_id")" == running ]]; then
   ok "Collector service is running"
@@ -17,7 +30,7 @@ else
 fi
 
 for service in sms-service sms-worker; do
-  if docker compose exec -T "$service" python - <<'PY' >/dev/null 2>&1
+  if compose exec -T "$service" python - <<'PY' >/dev/null 2>&1
 import os
 import urllib.request
 port = os.environ.get("SMS_METRICS_PORT", "9464") if "worker" in os.environ.get("OTEL_SERVICE_NAME", "") else "8080"
@@ -38,7 +51,7 @@ docker run --rm --network "$NETWORK" \
   || fail "telemetrygen failed"
 
 bad_logs="$(
-  docker compose logs --since=10m "$COLLECTOR_SERVICE" 2>&1 |
+  compose logs --since=10m "$COLLECTOR_SERVICE" 2>&1 |
     grep -Ei 'queue is full|connection refused|tls:|Unauthenticated|Permanent error' || true
 )"
 if [[ -z "$bad_logs" ]]; then