Scalekit AgentKit Production Readiness

Work through each section in order — earlier sections are blockers for later ones.

Guardrails

• MUST NOT sign off as production-ready while any blocker item in an earlier section is unchecked.
• MUST validate the production Scalekit environment before go-live (SCALEKIT_ENVIRONMENT_URL ends in .scalekit.com, not .scalekit.dev). You may exercise the full OAuth cycle first against a dedicated staging app that still points at production AgentKit credentials — that is still "production credentials," not a .scalekit.dev sandbox.
• MUST NOT ship with secrets in source — credentials live only in environment variables.

Quick checks (run first)

# Confirm production credentials are set (not .scalekit.dev sandbox)
echo $SCALEKIT_ENVIRONMENT_URL    # should be https://<subdomain>.scalekit.com (not .scalekit.dev)
echo $SCALEKIT_CLIENT_ID  # should be set
echo $SCALEKIT_CLIENT_SECRET  # should be set