Update config defs

backend/src/core/config/config-loader.ts

@@ -41,13 +41,13 @@ const configSchema = z.object({
     audience: z.string(),
   }),
 
-  // External APIs configuration
+  // External APIs configuration (optional)
   external: z.object({
     vpic: z.object({
       url: z.string(),
       timeout: z.string(),
-    }),
-  }),
+    }).optional(),
+  }).optional(),
 
   // Service configuration
   service: z.object({

config/app/production.yml

@@ -29,7 +29,6 @@ auth0:
   audience: https://api.motovaultpro.com
   # client_id and client_secret loaded from secrets
 
-# External APIs Configuration
 # google_maps_api_key loaded from secrets/app/google-maps-api-key.txt
 
 # Service Authentication

scripts/inject-secrets.sh

@@ -57,9 +57,9 @@ inject_secret() {
         rm -rf "$target_path"
     fi
 
-    # Copy the secret file
+    # Copy the secret file (644 so container users can read)
     cp "$source_path" "$target_path"
-    chmod 600 "$target_path"
+    chmod 644 "$target_path"
     echo "  OK: $file_name"
 }