2 Commits (fffcecb15205c0fe212b383f7df57bf77bc1b6d2)

Author	SHA1	Message	Date
nexxo	fffcecb152	fix(engine-b): address Codex round 3 (webhook email/replay/rotation, db secret) ... - Require a real customer email (no unknown@ fallback merging customers). - Stripe signature: enforce 5-min replay tolerance + accept any rotating v1. - DeployApplicationStack no longer persists the DB password in the run context. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 12:12:24 +02:00
nexxo	446da58061	feat(engine-b): 15-step customer pipeline + DNS/Traefik services ... validate->reserve(placement)->clone->cloudinit->start->guestagent->network-> deploy->nextcloud->admin->dns/tls->backup->monitoring->acceptance->complete. HetznerDnsClient + TraefikWriter (interface+fake+real), CloudReady notification, hosts.node (set by RegisterCapacity). Secrets transient/encrypted, never plaintext. 21 tests incl. mocked end-to-end + crash idempotency. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>	2026-07-25 11:50:26 +02:00