config: load public cc-ci runtime environment

cc-ci-plan/load-env.sh

@@ -0,0 +1,17 @@
+#!/usr/bin/env bash
+# Load cc-ci runtime configuration. Source this file; do not execute it.
+#
+# Callers enable `set -a` so both files become exported environment variables.
+# Public configuration is loaded first, then the secret file. This preserves a
+# local secret override only where an emergency migration explicitly needs it.
+
+if [ -r /srv/cc-ci/cc-ci/.env.public ]; then
+  . /srv/cc-ci/cc-ci/.env.public
+fi
+
+if [ ! -r /srv/cc-ci/.testenv ]; then
+  echo "cc-ci secret environment is missing: /srv/cc-ci/.testenv" >&2
+  return 1
+fi
+
+. /srv/cc-ci/.testenv