fix: wfctl improvements and security hardening#173

Merged

intel352 merged 6 commits intomainfrom

fix/ws03-wfctl-fixes

Feb 26, 2026

Commits on Feb 26, 2026

fix(security): OPA and Cedar policy stubs now deny by default

intel352
and
claude
committed
fix(wfctl): add -env flag to runRun to fix deploy cloud passthrough

intel352
and
claude
committed
fix(security): use Stripe billing provider when STRIPE_API_KEY is set

intel352
and
claude
committed
fix(wfctl): replace manual YAML parser in loadWfctlConfig with yaml.Unmarshal

intel352
and
claude
committed
fix(wfctl): remove bytesReaderImpl in favor of bytes.NewReader

intel352
and
claude
committed
fix(wfctl): add compare as alias for contract test subcommand

intel352
and
claude
committed