chore(ci): avoid secret-like smoke placeholders

Author: rschlaefli

.github/workflows/chat-api-openrouter-smoke.yml

@@ -38,15 +38,15 @@ jobs:
           - 5432:5432
 
     env:
-      APP_SECRET: chat-api-openrouter-smoke-secret
+      APP_SECRET: local-dev-only
       CHAT_MODEL_REGISTRY_JSON: >-
         [{"id":"deepseek-v4-flash","deploymentId":"deepseek/deepseek-v4-flash","name":"DeepSeek V4 Flash","description":"OpenRouter smoke test model","fallback":true,"supportsReasoning":false,"supportsImageAttachments":false,"maxOutputTokens":256,"cost":{"input":0.27,"output":0.41}}]
       CHAT_OPENAI_STORE_RESPONSES: 'false'
       CHAT_SMOKE_API_BASE_URL: http://127.0.0.1:3305
       CHAT_SMOKE_TIMEOUT_MS: '120000'
       DATABASE_URL: postgresql://klicker:klicker@localhost:5432/klicker-prod
       FALLBACK_MODEL_ID: deepseek/deepseek-v4-flash
-      OPENAI_API_KEY: ${{ secrets.OPENROUTER_API_KEY || 'placeholder-openrouter-api-key' }}
+      OPENAI_API_KEY: ${{ secrets.OPENROUTER_API_KEY || 'ci-placeholder' }}
       OPENAI_BASE_URL: https://openrouter.ai/api/v1
       PORT: '3305'
 
@@ -109,7 +109,7 @@ jobs:
             echo
             echo 'This workflow executes the real chat-api OpenRouter smoke path against DeepSeek V4 Flash.'
             echo
-            echo 'The smoke step is currently non-blocking because the workflow falls back to a placeholder key when `OPENROUTER_API_KEY` is not configured as a repository secret.'
+            echo 'The smoke step is currently non-blocking because the workflow falls back to an invalid placeholder when `OPENROUTER_API_KEY` is not configured as a repository secret.'
           } >> "$GITHUB_STEP_SUMMARY"
 
       - name: Print chat-api logs