src/devcore/security_middleware.py

import os

class SecurityMiddleware:
    def __init__(self):
        # Load from environment — never hardcode
        token = os.environ.get("VITALIS_SUPERUSER_TOKEN")
        self.authorized_tokens = [token] if token else []
        if not token:
            print("[SECURITY] WARNING: VITALIS_SUPERUSER_TOKEN not set in environment")

    def is_authorized(self, token):
        return token in self.authorized_tokens