chore(secrets): add manifest receipt secret

[WcaleNieWolny]

Summary

• add MANIFEST_SIZE_RECEIPT_SECRET to the encrypted production environment
• update the git-secret integrity mapping
• keep the plaintext production environment ignored and out of git

Validation

• confirmed the encrypted artifact decrypts to the recorded SHA-256 checksum
• compared environment variable names against main; only MANIFEST_SIZE_RECEIPT_SECRET was added
• confirmed internal/cloudflare/.env.prod remains ignored and untracked
• git diff --check

Follow-up to #3465.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[coderabbitai]

Warning

Review limit reached

Next included review available in 51 seconds.

Check out review usage here.

View limit details

Limit details: You’ve used all 2 included reviews currently available.

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

Learn how review limits work.

Review configuration:

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Advanced

Run ID: 99d3998d-f829-408d-9041-4fc424d4a18f

📥 Commits

Reviewing files that changed from the base of the PR and between 384ec2e and 0ed5303.

📒 Files selected for processing (2)

• .gitsecret/paths/mapping.cfg
• internal/cloudflare/.env.prod.secret

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[codspeed]

Merging this PR will not alter performance

✅ 43 untouched benchmarks
⏩ 2 skipped benchmarks¹

---

_{Comparing wolny/update-manifest-receipt-secret (0ed5303) with main (384ec2e)}

Footnotes

1. 2 benchmarks were skipped, so the baseline results were used instead. If they were deleted from the codebase, click here and archive them to remove them from the performance reports. ↩

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud