Initial SQL-only 1C adapter baseline

tests/1c/test_deploy_1c_adapter_security.py

@@ -0,0 +1,15 @@
+from __future__ import annotations
+
+from pathlib import Path
+
+
+ROOT = Path(__file__).resolve().parents[2]
+
+
+def test_rest_deploy_refuses_to_drop_service_authentication() -> None:
+    source = (ROOT / "scripts" / "deploy_1c_adapter_stack.ps1").read_text(encoding="utf-8-sig")
+    assert "function Ensure-RestServiceToken" in source
+    assert "ONEC_ADAPTER_ALLOW_UNAUTHENTICATED_ADMIN" in source
+    assert "Reusing the existing REST service token without printing or persisting it" in source
+    assert "Refusing to deploy an unauthenticated adapter" in source
+    assert source.index("Ensure-RestServiceToken") < source.index("Invoke-ComposeUp `", source.index("try {"))