fix(HEL-494): enforce datahub as sole website market boundary

Co-authored-by: multica-agent <github@multica.ai>

tests/test_bootstrap_container.py

@@ -10,7 +10,7 @@ from database import ReviewDatabase
 
 
 class BootstrapContainerTests(unittest.TestCase):
-    def test_environment_credentials_preserve_legacy_model_fallbacks(self) -> None:
+    def test_environment_credentials_exclude_provider_secrets_and_preserve_llm_fallbacks(self) -> None:
         result = environment_credentials(
             {
                 "TUSHARE_TOKEN": " tushare ",
@@ -20,8 +20,8 @@ class BootstrapContainerTests(unittest.TestCase):
                 "LLM_MODEL": "legacy-model",
             }
         )
-        self.assertEqual(result["tushare_token"], "tushare")
-        self.assertEqual(result["ifind_refresh_token"], "refresh")
+        self.assertNotIn("tushare_token", result)
+        self.assertNotIn("ifind_refresh_token", result)
         self.assertEqual(result["platform_llm_primary_api_key"], "legacy-key")
         self.assertEqual(result["platform_llm_primary_base_url"], "https://legacy.example/v1")
         self.assertEqual(result["platform_llm_primary_model"], "legacy-model")