Integrate Doppler secrets

scripts/apply-webshare-secret

@@ -0,0 +1,13 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+if [ -n "${WEBSHARE_API_KEY:-}" ] && [ -n "${WEBSHARE_PROXY_USERNAME:-}" ] && [ -n "${WEBSHARE_PROXY_PASSWORD:-}" ]; then
+  kubectl create secret generic webshare-api \
+    --from-literal=api-key="$WEBSHARE_API_KEY" \
+    --from-literal=proxy-username="$WEBSHARE_PROXY_USERNAME" \
+    --from-literal=proxy-password="$WEBSHARE_PROXY_PASSWORD" \
+    --dry-run=client \
+    -o yaml | kubectl apply -f -
+else
+  echo "Webshare runtime config missing; country scraping unavailable"
+fi