Post ClawSweeper Endor review alerts through Hermit

.env.example

@@ -4,6 +4,8 @@ DISCORD_CLIENT_ID=
 DISCORD_PUBLIC_KEY=
 FORWARDER_PUBLIC_KEY=
 DISCORD_BOT_TOKEN=
+CLAWSWEEPER_ENDOR_DISCORD_CHANNEL_ID=
+CLAWSWEEPER_HERMIT_TOKEN=
 DISCORD_DEV_GUILDS=
 ANSWER_OVERFLOW_API_KEY=
 HELPER_THREAD_WELCOME_PARENT_ID=

README.md

@@ -27,6 +27,8 @@ DEPLOY_SECRET=
 DISCORD_CLIENT_ID=
 DISCORD_PUBLIC_KEY=
 DISCORD_BOT_TOKEN=
+CLAWSWEEPER_ENDOR_DISCORD_CHANNEL_ID=
+CLAWSWEEPER_HERMIT_TOKEN=
 ```
 
 Optional:
@@ -126,3 +128,7 @@ bunx wrangler secret put FORWARDER_PUBLIC_KEY
 - Answer Overflow base URL is hardcoded to `https://www.answeroverflow.com`.
 - Helper thread monitor runs via Worker cron (`wrangler.jsonc` `triggers.crons`).
 - The old Cloudflare Gateway Durable Object path is not the active gateway setup.
+- `POST /api/clawsweeper/endor-remediation/reviewed` accepts authenticated,
+  structured Endor review results from ClawSweeper and posts them only to
+  `CLAWSWEEPER_ENDOR_DISCORD_CHANNEL_ID`. The shared bearer secret is
+  `CLAWSWEEPER_HERMIT_TOKEN`.

drizzle/0013_many_chameleon.sql

@@ -0,0 +1,13 @@
+CREATE TABLE `endor_notification_deliveries` (
+	`idempotency_key` text PRIMARY KEY NOT NULL,
+	`payload_digest` text NOT NULL,
+	`nonce` text NOT NULL,
+	`status` text DEFAULT 'pending' NOT NULL,
+	`channel_id` text NOT NULL,
+	`message_id` text,
+	`created_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL,
+	`updated_at` text DEFAULT (strftime('%Y-%m-%dT%H:%M:%fZ', 'now')) NOT NULL,
+	`delivered_at` text
+);
+--> statement-breakpoint
+CREATE INDEX `idx_endor_notification_deliveries_status` ON `endor_notification_deliveries` (`status`);