feat(server): enhance secret management and logging functionality

- Added SCRUNNER_SECRETS_KEY to README as a required variable for production.
- Implemented redaction of sensitive information in logs across various components.
- Enhanced script execution functions to include an owner parameter for better secret management.
- Introduced a secrets API in the script sandbox for retrieving and managing secrets.
- Updated UI components to support owner selection for script execution and secret management.

packages/server/runner.js

@@ -15,7 +15,9 @@ import scriptsPluginFactory from "./src/api/scripts.js";
 import workflowsPluginFactory from "./src/api/workflows.js";
 import runsPlugin from "./src/api/runs.js";
 import dashboardPluginFactory from "./src/api/dashboard.js";
+import secretsPlugin from "./src/api/secrets.js";
 import { WEB_DIST } from "./paths.js";
+import { resolveSecretsKeyMaterial } from "./secrets.js";
 
 await migrate();
 enableLogPersistence();
@@ -29,6 +31,13 @@ if (!jwtSecret) {
   process.exit(1);
 }
 
+try {
+  resolveSecretsKeyMaterial();
+} catch (err) {
+  log.error(err instanceof Error ? err.message : String(err));
+  process.exit(1);
+}
+
 const server = fastify({ loggerInstance: log });
 
 await server.register(cookie);
@@ -78,6 +87,7 @@ await server.register(
     });
     await api.register(authPlugin);
     await api.register(usersPlugin);
+    await api.register(secretsPlugin);
     await api.register(scriptsPluginFactory(registry));
     await api.register(workflowsPluginFactory(registry));
     await api.register(runsPlugin);