feat(license-requests): automate Microsoft Forms → Hub workflow (spec 032)

.env.local.example

@@ -37,6 +37,20 @@ CRON_SECRET="generate-with-openssl-rand-base64-32"
 # Min 16 chars; recommend `openssl rand -base64 32`.
 INVOICE_INGEST_SECRET=""
 
+# Bearer token for POST /api/license-requests/ingest (spec 032 — license request automation).
+# Power Automate calls this endpoint when a Microsoft Form is submitted.
+# Min 16 chars; recommend `openssl rand -base64 32`.
+LICENSE_REQUEST_INGEST_SECRET=""
+
+# Microsoft Graph (spec 032) — Entra app registration filed in IT-112678.
+# Needed for outbound channel replies + group chat messages from the Hub to Teams.
+# Required permissions: ChannelMessage.Send, ChatMessage.Send (application, admin-consented).
+# If any of these are unset, the Hub will skip Graph posts gracefully — the request
+# state machine still works, but Teams notifications won't go out.
+GRAPH_TENANT_ID=""
+GRAPH_CLIENT_ID=""
+GRAPH_CLIENT_SECRET=""
+
 # Resend (transactional email service for invite emails)
 RESEND_API_KEY="re_xxxxxxxxxxxxx"
 # Sender email address (must be verified in Resend dashboard)