Wire local NVD key loading

scripts/intel/run-hourly.sh

@@ -2,6 +2,7 @@
 set -euo pipefail
 
 cd /Users/x/websafe
+source /Users/x/websafe/scripts/load-local-env.sh
 LOG_DIR="/Users/x/websafe/08-threat-intel/generated/logs"
 mkdir -p "$LOG_DIR"
 STAMP="$(date '+%Y%m%d-%H%M%S')"

scripts/intel/run-nightly.sh

@@ -2,6 +2,7 @@
 set -euo pipefail
 
 cd /Users/x/websafe
+source /Users/x/websafe/scripts/load-local-env.sh
 LOG_DIR="/Users/x/websafe/08-threat-intel/generated/logs"
 mkdir -p "$LOG_DIR"
 STAMP="$(date '+%Y%m%d-%H%M%S')"

scripts/intel/run-weekly-reconcile.sh

@@ -2,6 +2,7 @@
 set -euo pipefail
 
 cd /Users/x/websafe
+source /Users/x/websafe/scripts/load-local-env.sh
 LOG_DIR="/Users/x/websafe/08-threat-intel/generated/logs"
 mkdir -p "$LOG_DIR"
 STAMP="$(date '+%Y%m%d-%H%M%S')"

scripts/load-local-env.sh

@@ -0,0 +1,14 @@
+#!/bin/bash
+
+set -euo pipefail
+
+DEFAULT_ENV_FILE="$HOME/.config/websafe/env.sh"
+WEBSAFE_ENV_FILE="${WEBSAFE_ENV_FILE:-$DEFAULT_ENV_FILE}"
+
+if [[ -f "$WEBSAFE_ENV_FILE" ]]; then
+  # Export variables defined in the local secrets file for child processes.
+  set -a
+  # shellcheck disable=SC1090
+  source "$WEBSAFE_ENV_FILE"
+  set +a
+fi

scripts/sync-gitea.sh

@@ -12,6 +12,7 @@ set -euo pipefail
 
 # 配置
 REPO_DIR="/Users/x/websafe"
+source "${REPO_DIR}/scripts/load-local-env.sh"
 GITEA_URL="https://git.hk.hao.work"
 GITEA_API="${GITEA_URL}/api/v1"
 REPO_NAME="${REPO_NAME:-websafe-kb}"