refactor(security): remove AWS access key env vars and S3 tool bundle upload scripts
loading diff…
mercury/config.py: Remove __anthropic class (AWS_ANTHROPIC_ACCESS_KEY_ID, AWS_ANTHROPIC_SECRET_ACCESS_KEY) — both keys were dead config, never referenced anywhere outside config.py. Remove S3 access_key_id, secret_access_key, custom_tools_bucket, lambda_bucket, endpoint_url — Lambda authenticates via IAM execution role, no hardcoded credentials needed.mercury/storage/s3.py: Simplify S3.from_env() to pass only region_name; IAM role handles auth automatically.auth-config/src/upload-s3.ts, auth-config/src/create-and-upload.ts: Delete — tool-execution-lambda S3 bucket is no longer used for tool bundle uploads.func.yaml, Makefile: Remove AWS_S3_ENDPOINT_URL, AWS_LAMBDA_ACCESS_KEY_ID, AWS_LAMBDA_SECRET_ACCESS_KEY, AWS_S3_LAMBDA_BUCKET from Knative local dev config; keep AWS_S3_REGION_NAME for large payload offloading.Large payload offloading (LARGE_PAYLOAD_S3_BUCKET) is unaffected.
make chk passes (ruff + mypy) — verified locally🤖 Generated with Claude Code