feat(security): add internal secret handling and Redis integration for bot events

modules/io/build.gradle.kts

@@ -52,6 +52,7 @@ dependencies {
     implementation(project(":modules:api"))
     implementation(project(":modules:json"))
     implementation(project(":modules:rule"))
+    implementation(project(":modules:security"))
 
     // Jackson for JSON serialization/deserialization
     implementation("com.fasterxml.jackson.core:jackson-databind:${versions["JACKSON"]!!}")

modules/io/src/main/resources/application.yml

@@ -6,6 +6,10 @@ quarkus:
       use-separate-server: false
   application:
     name: nowchess-io
+
+nowchess:
+  internal:
+    secret: ${INTERNAL_SECRET}
   smallrye-openapi:
     info-title: NowChess IO Service
     info-version: 1.0.0

modules/io/src/main/scala/de/nowchess/io/service/resource/IoResource.scala

@@ -1,6 +1,7 @@
 package de.nowchess.io.service.resource
 
 import de.nowchess.api.game.GameContext
+import de.nowchess.security.InternalOnly
 import de.nowchess.io.fen.{FenExporter, FenParser}
 import de.nowchess.io.pgn.{PgnExporter, PgnParser}
 import de.nowchess.io.service.dto.{CombinedExportResponse, ImportFenRequest, ImportPgnRequest, IoErrorDto}
@@ -15,6 +16,7 @@ import org.eclipse.microprofile.openapi.annotations.tags.Tag
 
 @Path("/io")
 @ApplicationScoped
+@InternalOnly
 @Tag(name = "IO", description = "Chess notation import and export")
 class IoResource: