chore: remove secrets from source, add cypress.env.json to gitignore

Author: Ayooluwa

.github/workflows/ci.yml

@@ -0,0 +1,46 @@
+name: RegWatch Regression Suite
+
+on:
+  push:
+    branches: [ main ]
+  pull_request:
+    branches: [ main ]
+
+jobs:
+  regression-tests:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout Repository
+        uses: actions/checkout@v4
+
+      - name: Setup Node.js
+        uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+          cache: 'npm'
+
+      - name: Install Dependencies
+        run: npm ci
+
+      - name: Cypress Run & AI Enrichment
+        run: npm run cypress:run:full
+        env:
+          CYPRESS_email: ${{ secrets.REGWATCH_EMAIL }}
+          CYPRESS_password: ${{ secrets.REGWATCH_PASSWORD }}
+          HUGGINGFACE_API_TOKEN: ${{ secrets.HUGGINGFACE_API_TOKEN }}
+
+      - name: Generate Combined HTML Report
+        if: always()
+        run: npm run generate:html
+
+      - name: Upload Test Artifacts
+        if: always()
+        uses: actions/upload-artifact@v4
+        with:
+          name: regwatch-test-reports
+          path: |
+            cypress/reports/html
+            cypress/screenshots
+            cypress/videos
+          retention-days: 7

.gitignore

@@ -136,3 +136,6 @@ cypress/reports/
 # OS files
 .DS_Store
 Thumbs.db
+
+# Secrets
+cypress.env.json

Automation_Test_Flows/BDD_Bug_Report_Summary.txt

@@ -62,5 +62,5 @@ EVIDENCE: notification_settings_modified_1773707175432.png
 STATUS: PASS (Persistence works, UI fails)
 
 ================================================================================
-Generated by @QA-Detective AI Framework
+ by Ayooluwa (ai-powered QA)
 ================================================================================

Automation_Test_Flows/SECRETS.md

@@ -0,0 +1,60 @@
+# RegWatch Secrets Management
+
+This document outlines the protocol for handling sensitive credentials (passwords, API tokens) within the automated testing framework.
+
+---
+
+## 1. Local Development (`cypress.env.json`)
+
+To run tests locally with your personal or automation credentials, create a `cypress.env.json` file in the project root:
+
+```json
+{
+  "email": "your-email@tester.co.uk",
+  "password": "your-password-here"
+}
+```
+
+> [!CAUTION]
+> This file is listed in `.gitignore` and must never be committed to version control.
+
+---
+
+## 2. CI/CD Integration (GitHub Secrets)
+
+The regression pipeline pulls credentials from **GitHub Repository Secrets**. Ensure the following secrets are configured in the repository settings (`Settings > Secrets and variables > Actions`):
+
+| Secret Name | Description |
+| :--- | :--- |
+| `REGWATCH_EMAIL` | The automation account email (e.g. `automation123@tester.co.uk`) |
+| `REGWATCH_PASSWORD` | The corresponding account password |
+| `HUGGINGFACE_API_TOKEN` | Required by the `testaignite-reporter` for AI failure analysis |
+
+---
+
+## 3. Implementation in Tests
+
+Credentials are never hardcoded in `.cy.js` files. They are accessed via the `Cypress.env()` API.
+
+**In `commands.js`**:
+```javascript
+const userEmail = email || Cypress.env('email') || 'fallback@email.com';
+const userPassword = password || Cypress.env('password') || 'fallback_pw';
+```
+
+**In spec files**:
+```javascript
+beforeEach(() => {
+    cy.loginByApi(); // Dynamically resolves credentials from environment
+});
+```
+
+---
+
+## 4. Environment Priority
+
+Cypress resolves environment variables in the following order of priority:
+1. Arguments passed to `cy.loginByApi(manually_passed_email, manually_passed_pw)`
+2. `CYPRESS_` prefixed environment variables (CI pipeline)
+3. `cypress.env.json` (Local development)
+4. Default constant fallbacks (Hardcoded in `commands.js` for zero-config local runs)