feat: read the bridge's bot token and bridge secret from the host secrets file

[EthanThatOneKid]

The Discord Gateway bridge runs as a Zo process service, which starts from a bare environment: it inherits neither the host shell nor the deployment's Vercel variables. DISCORD_BOT_TOKEN and DISCORD_BRIDGE_SECRET exist on Vercel as sensitive values that cannot be read back, so a service definition could not carry them.

lib/host-secrets.ts reads them from /root/.zo_secrets — the same file the other Zo-hosted bots load — before anything reads the environment. An environment value always wins over the file, and ZO_SECRETS_PATH overrides the location, so both the service definition and the file stay able to supply any value.

This makes the bridge registrable without duplicating credentials into the service definition.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
computer	Ready	Preview	Sep 23, 2026 9:27pm UTC

[wazoocomputer]

This pull request modifies the Discord Gateway bridge to read DISCORD_BOT_TOKEN and DISCORD_BRIDGE_SECRET from the host secrets file (/root/.zo_secrets) instead of environment variables. This change ensures that these sensitive credentials are not duplicated in the service definition, aligning with how other Zo-hosted bots load their secrets. An environment variable will still override values from the host secrets file.

File	Change Type	Summary
README.md	modified	Updates deployment instructions for host secrets.
bridge/discord-gateway/index.ts	modified	Imports and calls loadHostSecrets to fill credentials.
lib/host-secrets.test.ts	added	Adds tests for parsing and loading host secrets.
lib/host-secrets.ts	added	Implements logic to parse and load host secrets.

Reviewers should begin by examining lib/host-secrets.ts to understand the new secret loading mechanism.

[wazoocomputer]

This pull request modifies the Discord Gateway bridge to read DISCORD_BOT_TOKEN and DISCORD_BRIDGE_SECRET from the host secrets file (/root/.zo_secrets) instead of environment variables. This change ensures that these sensitive credentials are not duplicated in the service definition, aligning with how other Zo-hosted bots load their secrets. An environment variable will still override values from the host secrets file.

File	Change Type	Summary
README.md	modified	Updates deployment instructions for host secrets.
bridge/discord-gateway/index.ts	modified	Imports and calls loadHostSecrets to fill credentials.
lib/host-secrets.test.ts	added	Adds tests for parsing and loading host secrets.
lib/host-secrets.ts	added	Implements logic to parse and load host secrets.

Reviewers should begin by examining lib/host-secrets.ts to understand the new secret loading mechanism.