fix(startup): WHATSAPP_APP_SECRET demoted to warning — API no longer crashes if absent

apps/api/src/index.ts

@@ -10,13 +10,20 @@ import { paymentRoutes, stripeWebhookRoute } from './routes/payments';
 import { internalRoutes } from './routes/internal';
 
 // ── Fail-fast: vérifier les secrets critiques au démarrage ─────────────────────
-const REQUIRED_ENV = ['ADMIN_API_KEY', 'WHATSAPP_APP_SECRET', 'WHATSAPP_VERIFY_TOKEN'];
+const REQUIRED_ENV = ['ADMIN_API_KEY', 'WHATSAPP_VERIFY_TOKEN'];
+const WARN_ENV = ['WHATSAPP_APP_SECRET']; // Warning seulement — HMAC skipped if absent
+
 for (const key of REQUIRED_ENV) {
     if (!process.env[key]) {
         console.error(`[STARTUP] ❌ Missing required environment variable: ${key}`);
         process.exit(1);
     }
 }
+for (const key of WARN_ENV) {
+    if (!process.env[key]) {
+        console.warn(`[STARTUP] ⚠️  ${key} not set — HMAC signature verification will be skipped`);
+    }
+}
 
 const server = Fastify({
     logger: true,