Fix PR #112 security review - restore docs, remove live credentials

scripts/agent-health-check.py

@@ -123,19 +123,13 @@ def _fail(key, agent_name=None):
 
 INFISICAL_TOKEN = os.environ.get("INFISICAL_TOKEN")
 if not INFISICAL_TOKEN:
-    print("INFISICAL_TOKEN not set — refusing to run with no credential", file=sys.stderr)
-    sys.exit(1)
-INFISICAL_API_URL = os.environ.get("INFISICAL_API_URL", "https://vault.sysloggh.net")
-
-# Fallback: if no env token, read the shared vault token file
-if not INFISICAL_TOKEN:
+    # Fallback: read the shared vault token file
     _token_path = os.path.expanduser("~/.infisical-token")
     if os.path.isfile(_token_path):
         try:
             with open(_token_path) as _f:
                 INFISICAL_TOKEN = _f.read().strip()
-        except (OSError, UnicodeDecodeError):
-            pass
+INFISICAL_API_URL = os.environ.get("INFISICAL_API_URL", "https://vault.sysloggh.net")
 
 # ── Helpers ──────────────────────────────────────────────────────────
 

scripts/daily-infra-report.py

@@ -16,7 +16,7 @@ from email.mime.text import MIMEText
 from email.mime.multipart import MIMEMultipart
 
 PVE = "https://192.168.68.12:8006"
-AUTH = "Authorization: PVEAPIToken=monitoring@pve!mumuni=eafd56c5-93d4-4d40-a41d-e688be0987f3"
+AUTH = "Authorization: PVEAPIToken=«vault: infrastructure/production PVE_API_TOKEN»"
 
 # ── Shared credentials —─