feat(config): cles des sources connectees et recherche a cle editables depuis la page Configurations (#103)

backend/tools/connected.py

@@ -11,7 +11,9 @@ hard-coded):
 * ``OBSIGATE_GITEA_URL``    — base URL of the self-hosted instance (e.g.
   ``https://git.example.net``); the ``gitea`` provider is only available when
   this variable is set. Admin-controlled, so the SSRF guard does not apply
-  (unlike user-supplied URLs).
+  (unlike user-supplied URLs). Both the URL and the tokens can also be set
+  from the configuration page (stored in ``data/api_keys.json``, #103) —
+  the stored value takes precedence over the environment.
 * ``OBSIGATE_GITEA_TOKEN``  — optional personal access token (private repos).
 * ``OBSIGATE_GITHUB_TOKEN`` — optional token (raises the API rate limits and
   unlocks private repositories).
@@ -26,7 +28,6 @@ from __future__ import annotations
 import base64
 import binascii
 import logging
-import os
 from typing import Any
 
 import httpx
@@ -34,6 +35,7 @@ import httpx
 from backend.tools.context import ToolError, ToolRisk
 from backend.tools.registry import tool
 from backend.tools.schemas import GitGetFileInput, GitProviderInput, GitSearchIssuesInput
+from backend.tools.secrets import get_tool_key
 
 logger = logging.getLogger("obsigate.tools.connected")
 
@@ -46,16 +48,16 @@ GITHUB_API = "https://api.github.com"
 def _provider_base(provider: str) -> tuple[str, str]:
     """Return (base_url, auth_header_value) for the requested provider."""
     if provider == "gitea":
-        base = os.environ.get("OBSIGATE_GITEA_URL", "").strip().rstrip("/")
+        base = get_tool_key("OBSIGATE_GITEA_URL").rstrip("/")
         if not base:
             raise ToolError(
                 "Source Gitea non configurée (OBSIGATE_GITEA_URL absente).",
                 code="provider_not_configured",
             )
-        token = os.environ.get("OBSIGATE_GITEA_TOKEN", "").strip()
+        token = get_tool_key("OBSIGATE_GITEA_TOKEN")
         return base, f"token {token}" if token else ""
     if provider == "github":
-        token = os.environ.get("OBSIGATE_GITHUB_TOKEN", "").strip()
+        token = get_tool_key("OBSIGATE_GITHUB_TOKEN")
         return GITHUB_API, f"Bearer {token}" if token else ""
     raise ToolError(
         f"Fournisseur inconnu : {provider} ('gitea' ou 'github')",