feat(secret-storage): add CyberArk Conjur as external secret storage provider

[fiftin]

Summary

Adds CyberArk Conjur as an Enterprise-tier external secret storage provider for project access keys and environment secrets, addressing PRO-1 for DICK'S Sporting Goods.

Changes

• Backend: Added SecretStorageTypeCyberArk (cyberark) constant and a Pro module deserializer stub following the same pattern as AWS Secrets Manager, Azure Key Vault, and Devolutions Server
• Routing: Wired CyberArk into AccessKeyEncryptionService.getDeserializer() so keys stored in CyberArk Conjur are resolved at runtime
• Frontend: Added CyberArk Conjur to the Enterprise secret storage menu with configuration fields for:
  • Server URL
  • Account (organization account name)
  • Login (username for API key authentication)
  • API Key (with DB / ENV / file storage options)
• UI: Added CyberArk icon and icon mappings in Secret Storages and Environment forms

Notes

The Pro module deserializer is a stub in this OSS repository; the actual CyberArk Conjur REST API integration (authenticate via /authn/{account}/login, retrieve secrets via /secrets/{account}/variable/{identifier}) will be implemented in the Enterprise codebase.

CyberArk Conjur is gated behind the secret_storage_management_ex Enterprise feature flag, consistent with other Enterprise providers.

Testing

• go test ./services/server/... -count=1 — pass
• go test ./services/project/... -run TestBackup -count=1 — pass

Linear Issue: PRO-1

  

[coderabbitai]

Important

Review skipped

Draft detected.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 091576b5-83e5-40f5-affe-610185d99e81

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch cursor/support-cyberark-5789

---

_{Comment @coderabbitai help to get the list of available commands.}