feat: added carto admin authorization

[otsybizov]

🤖 Linear

Closes CONG-XXX

[Copilot]

Pull request overview

Adds admin authorization and persistence for Cartographer handler pause/resume operations, improving operational control of webhook processing in the handler service.

Changes:

• Introduces CARTOGRAPHER_ADMIN_TOKEN (Bearer) auth for POST /pause and POST /resume.
• Persists pause state via DB checkpoints (cartographer_handler_paused) and restores it on startup.
• Renames verifyWebhookSecret → verifySecret and updates related tests/config.

Reviewed changes

Copilot reviewed 9 out of 9 changed files in this pull request and generated 3 comments.

Show a summary per file

File	Description
packages/agents/cartographer/handler/test/webhooks/webhookHandler.spec.ts	Updates tests to use renamed verifySecret.
packages/agents/cartographer/handler/test/server.spec.ts	Adds auth + persistence expectations for pause/resume endpoints.
packages/agents/cartographer/handler/src/webhooks/webhookHandler.ts	Renames secret verification helper; expands debug logging in webhook routing.
packages/agents/cartographer/handler/src/server.ts	Adds admin token verification, pause/resume auth, and checkpoint persistence.
packages/agents/cartographer/handler/src/init.ts	Adds adminToken to handler config sourced from env.
packages/agents/cartographer/handler/src/index.ts	Loads persisted pause state from DB checkpoint at startup.
ops/mainnet/staging/backend/variables.tf	Adds Terraform variable for cartographer_admin_token.
ops/mainnet/staging/backend/config.tf	Wires CARTOGRAPHER_ADMIN_TOKEN into handler container env vars.
ops/env/mainnet/backend/secrets.staging.json	Adds encrypted cartographer_admin_token secret for staging.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.