deploy(hf): sync szl-holdings/a11oy@78b81b01ef7d851a8d2c16a0faa3f4e4ecd1a902 derived COPY set

Reusable Dockerfile-COPY-derived deploy from szl-holdings/a11oy 78b81b01ef7d851a8d2c16a0faa3f4e4ecd1a902.
Files: 1179 Pruned: 0
Derived from Dockerfile COPY sources (NO hand-maintained allowlist).

Signed-off-by: SZL Holdings <noreply@szlholdings.ai>
Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

routers/gdw_frontier.py

@@ -146,14 +146,21 @@ def _credential_registry():
         for value in os.environ.get("GDW_LEGACY_SCOPES", "").split(",")
         if value.strip()
     )
+    principal_namespace = os.environ.get("GDW_NAMESPACE") or "a11oy"
+    legacy_token = os.environ.get("GDW_AUTH_TOKEN") if legacy_enabled else None
+    legacy_owner_id = os.environ.get("GDW_OWNER_ID") if legacy_enabled else None
+    legacy_namespace = os.environ.get("GDW_NAMESPACE") if legacy_enabled else None
+    if not legacy_enabled:
+        legacy_scopes = ()
     fingerprint = _sha(
         {
             "registry": registry_json,
             "principal_registry": principal_registry_json,
+            "principal_namespace": principal_namespace,
             "legacy_enabled": legacy_enabled,
-            "legacy_token": os.environ.get("GDW_AUTH_TOKEN"),
-            "legacy_owner": os.environ.get("GDW_OWNER_ID"),
-            "legacy_namespace": os.environ.get("GDW_NAMESPACE"),
+            "legacy_token": legacy_token,
+            "legacy_owner": legacy_owner_id,
+            "legacy_namespace": legacy_namespace,
             "legacy_scopes": legacy_scopes,
         }
     )
@@ -163,15 +170,11 @@ def _credential_registry():
         registry = load_credential_registry(
             registry_json,
             principal_registry_json=principal_registry_json,
-            principal_registry_namespace=os.environ.get("GDW_NAMESPACE") or "a11oy",
+            principal_registry_namespace=principal_namespace,
             legacy_enabled=legacy_enabled,
-            legacy_token=os.environ.get("GDW_AUTH_TOKEN"),
-            legacy_owner_id=os.environ.get("GDW_OWNER_ID"),
-            legacy_namespace=(
-                os.environ.get("GDW_NAMESPACE")
-                if legacy_enabled
-                else None
-            ),
+            legacy_token=legacy_token,
+            legacy_owner_id=legacy_owner_id,
+            legacy_namespace=legacy_namespace,
             legacy_scopes=legacy_scopes,
         )
         _AUTH_REGISTRY = registry