Validate configuration before serving and make credential changes testable

Build a typed configuration loader that rejects malformed values without printing them. Separate invalid configuration from temporary dependency failure, and test credential rotation and safe diagnostics instead of assuming a fresh secret lookup solves both.

30 MIN · PLUS