fix(forward): move secret item path to /secrets/{name} (INT-1666)

[armando-rodriguez-cko]

Completes the Forward secrets path rename (swagger 2026-07-20): the item endpoints PATCH/DELETE moved from /forward/secrets/{name} to /secrets/{name}, dropping the /forward prefix so the item matches the collection already on /secrets.

Jira: INT-1666
Tests: green (forward suite).

🤖 Generated with Claude Code

[agent-wall-e]

🟢 Risk Classification: LOW

Approval route: AI Auto-Approval
Rollback controls: Automated Instant Rollback + feature flags

Classification reasons

• no_low_class_matched
• prod_source_modified
• 2.2.6_logical_extension:The change only updates URL path constants used in existing API calls from '/forward/secrets' to '/secrets', reusing the same endpoints, abstractions, and code paths without adding new integrations, persisted data, or auth changes.

Operational gates

• ✅ jira_ticket (INT-1666)
• ✅ independent_review

Files analysed: 4

---

_{wall-e 2026.06.19-02 · policy 376219bc71e6…}

[agent-wall-e]

🔬 Debug — why this classification?

Each reason code emitted by the classifier, its source clause in the AI in SDLC Control Framework, and what it means.

Reason code	Kind	Clause	Meaning
no_low_class_matched	informational	§2.2 (fall-through)	None of the deterministic Low classes (§2.2.3, §2.2.4, §2.2.7, docs-only) applied; classifier fell through to LLM evaluation.
prod_source_modified	informational	§2.1 M7 (informational)	At least one file is non-doc, non-test, non-IaC — i.e. application source code was modified.
2.2.6_logical_extension — The change only updates URL path constants used in existing API calls from '/forward/secrets' to '/secrets', reusing the same endpoints, abstractions, and code paths without adding new integrations, persisted data, or auth changes.	classifying	§2.2.6	Sonnet 4.6 evaluator promoted minor → low: the change reuses existing code paths and does not cross a trust boundary.

Kinds:

• classifying — this rule contributed to the chosen tier.
• informational — context only; did not by itself decide the tier.

See issue #3 for the proposal to formalise this map as Appendix A of the standards doc.

_{wall-e 2026.06.19-02 · debug}

[agent-wall-e]

✅ Auto-approved — this PR meets all Low-risk criteria.

All checks passed, no unresolved comments, and the change classification is:

• no_low_class_matched
• prod_source_modified
• 2.2.6_logical_extension:The change only updates URL path constants used in existing API client methods (removing the '/forward' prefix), reuses all existing code paths and abstractions, and introduces no new endpoints, persisted data, auth changes, or external integrations.

_{wall-e 2026.06.19-02 · policy 376219bc71e6…}

[agent-wall-e]

🟢 Risk Classification: LOW

Approval route: AI Auto-Approval
Rollback controls: Automated Instant Rollback + feature flags

Classification reasons

• no_low_class_matched
• prod_source_modified
• 2.2.6_logical_extension:The change only updates URL path construction for existing API methods by removing the '/forward' prefix segment, reusing the same endpoints, abstractions, and code paths without adding new integrations, persisted data, or auth changes.

Operational gates

• ✅ jira_ticket (INT-1666)
• ✅ independent_review

Files analysed: 4

---

_{wall-e 2026.06.19-02 · policy 376219bc71e6…}

[agent-wall-e]

🔬 Debug — why this classification?

Each reason code emitted by the classifier, its source clause in the AI in SDLC Control Framework, and what it means.

Reason code	Kind	Clause	Meaning
no_low_class_matched	informational	§2.2 (fall-through)	None of the deterministic Low classes (§2.2.3, §2.2.4, §2.2.7, docs-only) applied; classifier fell through to LLM evaluation.
prod_source_modified	informational	§2.1 M7 (informational)	At least one file is non-doc, non-test, non-IaC — i.e. application source code was modified.
2.2.6_logical_extension — The change only updates URL path construction for existing API methods by removing the '/forward' prefix segment, reusing the same endpoints, abstractions, and code paths without adding new integrations, persisted data, or auth changes.	classifying	§2.2.6	Sonnet 4.6 evaluator promoted minor → low: the change reuses existing code paths and does not cross a trust boundary.

Kinds:

• classifying — this rule contributed to the chosen tier.
• informational — context only; did not by itself decide the tier.

See issue #3 for the proposal to formalise this map as Appendix A of the standards doc.

_{wall-e 2026.06.19-02 · debug}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud