Live Env

1# shellcheck shell=bash
2# live-env.sh — the live layer's credentials file. Sourced by live.sh only.
3#
4# Live cases need real credentials (and sometimes a real <SERVICE>_BASE_URL),
5# and every other layer must NOT see them. The unit render has ignored
6# <SERVICE>_BASE_URL, but compose and e2e render with every
7# override, so a real value exported into a whole `graphos-factory-core evidence`
8# run would still change what those layers test. So the file is loaded here,
9# inside the live.sh process, and nowhere else.
10#
11# Which file:
12#   1. $GRAPHOS_FACTORY_CORE_LIVE_ENV, when set — it must exist;
13#   2. otherwise the nearest `smoke.env`, from the workspace up to the top of
14#      the git checkout it sits in (the workspace alone when it is not in git).