security: fix auth bypass, add disconnect auth gate, .env.example, au… #501

	name: CI

	on:
	push:
	branches: [main]
	pull_request:
	branches: [main]

	jobs:
	test:
	name: Tests (Python 3.12)
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@v4

	- name: Install uv
	uses: astral-sh/setup-uv@v5
	with:
	version: "latest"

	- name: Set up Python
	run: uv python install 3.12

	- name: Install dependencies
	run: uv sync --all-extras

	- name: Run tests with coverage
	env:
	GROQ_API_KEY: gsk_ci_dummy_key_for_tests_only
	run: uv run pytest tests/ -v --tb=short --cov --cov-report=xml --junitxml=junit.xml -o junit_family=legacy

	- name: Upload coverage to Codecov
	uses: codecov/codecov-action@v5
	with:
	token: ${{ secrets.CODECOV_TOKEN }}
	files: coverage.xml
	fail_ci_if_error: false

	- name: Upload test results to Codecov
	if: ${{ !cancelled() }}
	uses: codecov/test-results-action@v1

	- name: Lint (ruff)
	run: uv run ruff check .
	continue-on-error: true

	build:
	name: Frontend build
	runs-on: ubuntu-latest
	defaults:
	run:
	working-directory: frontend

	steps:
	- uses: actions/checkout@v4

	- uses: actions/setup-node@v4
	with:
	node-version: 20
	cache: npm
	cache-dependency-path: frontend/package-lock.json

	- name: Install dependencies
	run: npm ci --legacy-peer-deps

	- name: Build
	run: npm run build
	env:
	AUTH_SECRET: ci_dummy_secret_not_used_in_build
	NEXT_PUBLIC_WALLETCONNECT_PROJECT_ID: bec422518cfa4cfbc6e83d3c1bd8d07b

Provide feedback