chore(ci): wire THROTTLE_BYPASS_SECRET into staging deploy

[FSM1]

Summary

Adds THROTTLE_BYPASS_SECRET to the staging .env.staging generated during deploy. Without this, each deploy overwrites the env file and loses the throttle bypass, causing SDK E2E and load tests to hit 429s.

GitHub secret STAGING_THROTTLE_BYPASS_SECRET has been set on the staging environment.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Added new environment variable to staging deployment configuration.
  • Updated release tag detection logic to prioritize component-specific tags.
  • Modified release configuration to include component name in generated tags.
  • Updated release tag input example format.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: b8091cd0-f3e8-43e3-9ea3-135a6134fc03

📥 Commits

Reviewing files that changed from the base of the PR and between d331cce and d5c3f01.

📒 Files selected for processing (4)

• .github/workflows/deploy-staging.yml
• .github/workflows/release-gate.yml
• .github/workflows/tag-staging.yml
• release-please-config.json

---

Walkthrough

The PR updates CI/CD configuration files to introduce a throttle bypass secret to staging deployment, refine release tag detection logic to prefer cipher-box-v* tags, update a workflow input example, and configure release-please with a cipher-box component identifier.

Changes

Cohort / File(s)	Summary
Staging & Release Workflows .github/workflows/deploy-staging.yml, .github/workflows/tag-staging.yml	Added THROTTLE_BYPASS_SECRET environment variable to staging deployment and updated workflow input example from v0.3.0 to cipher-box-v0.26.4.
Release Gate Workflow .github/workflows/release-gate.yml	Refined tag detection logic to prefer cipher-box-v* tags when selecting the previous release Git tag, falling back to generic v* tags if none match.
Release Configuration release-please-config.json	Set root package component to "cipher-box" and enabled include-component-in-tag to include component metadata in release tags.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• ci(staging): wire missing env vars into staging deploy #136 — Adds environment variables to .github/workflows/deploy-staging.yml for staging deployment configuration.
• fix(ci): poll for E2E completion in release gate #252 — Modifies release-gate.yml tag selection and change-detection logic around previous release identification.
• chore(ci): add ${component} to release-please PR title pattern #307 — Updates release-please configuration to include component metadata in PR titles and tags.

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the primary change: adding THROTTLE_BYPASS_SECRET to the staging deployment workflow.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/add-throttle-bypass-to-staging-deploy

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}