feat: Secrets

[Ark-kun]

API changes

List secrets: GET /api/secrets/.
Create a secret: POST /api/secrets/.
Update a secret: PUT /api/secrets/{secret_id}.
Delete a secret: DELETE /api/secrets/{secret_id}.

DB changes

class Secret(_TableBase):
    __tablename__ = "secret"
    user_id: orm.Mapped[str] = orm.mapped_column(primary_key=True, index=True)
    secret_id: orm.Mapped[str] = orm.mapped_column(primary_key=True)
    secret_value: orm.Mapped[str]
    created_at: orm.Mapped[datetime.datetime | None] = orm.mapped_column(default=None)
    updated_at: orm.Mapped[datetime.datetime | None] = orm.mapped_column(default=None)
    extra_data: orm.Mapped[dict[str, Any] | None] = orm.mapped_column(default=None)

TaskSpec changes

componentRef: ...
  spec:
    inputs:
    - {name: input4, type: Secret}
arguments:
  input1: "constant value"
  input2:
    taskOutput:
      taskId: "task1"
      outputName: "output1"
  input3:
    graphInput:
      inputName: "graph_input_1"
  # New:
  input4:
    secret:
      id: "OPENAI_TOKEN"

Fixes: #51

[yuechao-qin]

Some questions/comments. Great work getting secrets working quickly!

[yuechao-qin]

Suggested change

	if not raise_if_exists:
	if raise_if_exists:

I believe you don't want the not here?

[yuechao-qin]

Curious why is there a rollback here? I didn't notice any session changes.

[yuechao-qin]

Curious is there any validation needed for secret id/value? For example, what if they were empty strings?

[yuechao-qin]

Suggested change

	):
	) -> None:

[yuechao-qin]

Suggested change

	):
	) -> None:

[yuechao-qin]

Suggested change

	):
	return self._set_secret_value(
	) -> None:
	self._set_secret_value(

_set_secret_value doesn't return anything, so a return is not necessary here?

[yuechao-qin]

Suggested change

	):
	return self._set_secret_value(
	) -> None:
	self._set_secret_value(