chore: standardize security and quality foundations

scripts/deploy_beta_ams_dev01.sh

@@ -6,7 +6,6 @@ cd "$repo_root"
 
 deploy_host="${DEPLOY_HOST:-AMS-DEV01}"
 deploy_user="${DEPLOY_USER:-zak}"
-prod_path="${PROD_DEPLOY_PATH:-/home/${deploy_user}/magent}"
 deploy_path="${BETA_DEPLOY_PATH:-/home/${deploy_user}/magent-beta}"
 beta_frontend_bind="${BETA_FRONTEND_BIND:-10.30.1.32}"
 ssh_opts="${DEPLOY_SSH_OPTS:-"-o StrictHostKeyChecking=yes"}"
@@ -32,19 +31,14 @@ git archive --format=tar HEAD | ssh ${ssh_opts} "${remote}" "
   done
   tar -xf - -C '${deploy_path}'
 
-  if [ ! -f '${deploy_path}/.env' ] && [ -f '${prod_path}/.env' ]; then
-    cp '${prod_path}/.env' '${deploy_path}/.env'
-  fi
-  if [ -f '${deploy_path}/.env' ]; then
-    chmod 600 '${deploy_path}/.env'
+  if [ ! -f '${deploy_path}/.env' ]; then
+    echo 'Beta .env is missing. Provision independent beta secrets before deploying.' >&2
+    exit 1
   fi
+  chmod 600 '${deploy_path}/.env'
 
   mkdir -p '${deploy_path}/data'
   chmod 700 '${deploy_path}/data'
-  if [ ! -f '${deploy_path}/data/magent.db' ] && [ -d '${prod_path}/data' ]; then
-    cp -a '${prod_path}/data/.' '${deploy_path}/data/'
-  fi
-
   cd '${deploy_path}'
   docker compose -p magent-beta -f docker-compose.beta.yml build
   if ! grep -Eq '^[[:space:]]*SETTINGS_ENCRYPTION_KEY=' .env; then