Remove API_BEARER_TOKEN from interactive prompt

Token is auto-generated and rotated on every deploy — prompting
the user for it was confusing and immediately overwritten. Keep
the key in .env.example with a do-not-edit comment so install.sh
still seeds it into .env for docker-compose.

Author: novatechflow

.env.example

@@ -11,9 +11,11 @@ EUOSINT_SITE_ADDRESS=:80
 # all|merge|fast|browser|api|api-ucdp|api-acled|api-gdelt
 COLLECTOR_ROLE=all
 
+# Internal API auth (auto-rotated on deploy — do not edit).
+API_BEARER_TOKEN=
+
 # External conflict data APIs.
 UCDP_ACCESS_TOKEN=
-API_BEARER_TOKEN=
 ACLED_USERNAME=
 ACLED_PASSWORD=
 

deploy/install.sh

@@ -246,9 +246,9 @@ configure_env() {
     [[ -z "$key" ]] && continue
     local example_val="${line#*=}"
 
-    # Ports are auto-derived from EUOSINT_SITE_ADDRESS — skip.
+    # Ports are auto-derived; bearer token is auto-rotated — skip.
     case "$key" in
-      EUOSINT_HTTP_PORT|EUOSINT_HTTPS_PORT) continue ;;
+      EUOSINT_HTTP_PORT|EUOSINT_HTTPS_PORT|API_BEARER_TOKEN) continue ;;
     esac
 
     # Current value from .env if present, otherwise .env.example default.