Test: Harden compose secret fixtures

tests/server/fixtures/secrets/clean/.env.example

@@ -3,3 +3,5 @@ API_TOKEN=
 ALLOW_EMPTY_PASSWORD=yes
 FEATURE_SECRET_ENABLED=false
 PRIVATE_KEY_PATH=/run/secrets/private_key
+TOKENIZER_MODEL=gpt2
+PASSWORDLESS_PROVIDER=webauthn

tests/server/fixtures/secrets/leaked/plain-list.yml

@@ -0,0 +1,4 @@
+services:
+  application:
+    environment:
+      - API_TOKEN=fixture-should-be-rejected

tests/server/fixtures/secrets/leaked/quoted-list.yml

@@ -0,0 +1,4 @@
+services:
+  application:
+    environment:
+      - "API_TOKEN=fixture-should-be-rejected"

tests/server/fixtures/secrets/leaked/quoted-mapping.yml

@@ -0,0 +1,4 @@
+services:
+  application:
+    environment:
+      "API_TOKEN": fixture-should-be-rejected