fix: mac-local-dev/run-carbide-api.sh script

[kurotych]

Description

Fix the mac-local-dev/run-carbide-api.sh script to enable running carbide-api natively on macOS.

Problem 1

Error message:

level=ERROR msg="Vault root CA not found at /var/run/secrets/forge-roots/ca.crt. Refusing to connect without TLS verification."
location="crates/secrets/src/forge_vault.rs:90"

Reason: #652 enforces TLS verification even when http is used in the VAULT_ADDR environment variable.

fix(workaround): Pass any existing certificate in the local dev setup to satisfy the initial check.

Problem 2

Error message:

Error: CARBIDE_WEB_AUTH_TYPE=basic is not supported. Use "none" (default; secure the UI with network controls or an auth proxy) or "oauth2" (SSO via Entra).

Location:
    crates/api/src/web/mod.rs:240:24

fix: Starting from #761, use "none" instead of "basic".

Type of Change

• Add - New feature or capability
• Change - Changes in existing functionality
• Fix - Bug fixes
• Remove - Removed features or deprecated functionality
• Internal - Internal changes (refactoring, tests, docs, etc.)

Related Issues (Optional)

Breaking Changes

• This PR contains breaking changes

Testing

• Unit tests added/updated
• Integration tests added/updated
• Manual testing performed
• No testing required (docs, internal refactor, etc.)

Additional Notes

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[poroh]

/ok to test 74b3533

[github-actions]

🔐 TruffleHog Secret Scan

✅ No secrets or credentials found!

Your code has been scanned for 700+ types of secrets and credentials. All clear! 🎉

🔗 View scan details

_{🕐 Last updated: 2026-04-07 21:52:50 UTC | Commit: 74b3533}