fix(agent): remove floci AWS env credentials (FB-2197)

[fstr]

Background

FB-2197: local floci-backed deploys do not need engine AWS credential environment variables, and the helm-test path should prove the configured object storage can back managed tables.

Summary

• Remove the AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY entries from the values file generated by scripts/lib/deploy.sh.
• Remove the same dummy credentials from helm/values-dev.yaml.
• Update the quickstart, local floci comments, and internal local-development note so the documented local path only configures the floci storage endpoint.
• Add managed-table SQL coverage to the shared deploy verification and Helm test SQL hook: drop/create/insert/select/drop through the gateway, which exercises the configured floci object-storage path beyond SELECT 1.

Test Plan

• make lint
• bash -n scripts/lib/deploy.sh
• make docs-check

---

Note

Medium Risk
Touches the default local deploy path and engine object-storage wiring; wrong assumptions about floci auth could break local installs, but changes are narrowly scoped to dev docs/values and additive test coverage.

Overview
Local floci deploys no longer inject dummy AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY on the engine. Those engineSpec.extraEnv blocks are removed from helm/values-dev.yaml, the values snippet built in scripts/lib/deploy.sh, and the quickstart / internal docs; copy now states that floci is zero-auth and only needs customEngineConfig.storage pointed at the floci endpoint.

Deploy and Helm tests now exercise managed-table storage, not just SELECT 1. run_query treats an empty expected substring as success (for DDL/DML with no body). run_managed_table_smoke in deploy.sh runs drop/create/insert/select/drop through the gateway during deploy_and_verify, with a dedicated managed_table phase for agents. The Helm test-sql-query hook uses a shared sql_query helper and the same managed-table sequence per engine.

^{Reviewed by Cursor Bugbot for commit e453c36. Bugbot is set up for automated code reviews on this repo. Configure here.}

[fireboltdb-docs-integration]

Mintlify docs preview

Docs were aggregated into the Firebolt documentation site.

Status	Preview	Updated (UTC)
🟢 Ready	View Preview	Jul 14, 2026, 8:21 PM

• Packdb PR (draft): https://github.com/firebolt-analytics/packdb/pull/24080
• Aggregate branch: aggregate/helm-docs-pr-36

Mintlify may take a few minutes to finish building. This comment updates on each sync while the source PR is open.

[cursor]

Stale comment

Risk: medium. Not approving: Cursor Bugbot reported one unresolved high-severity finding on floci credential removal, and the Bugbot check finished as skipped. Reviewers assigned for human verification.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}

[cursor]

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 4587497. Configure here.}

[cursor]

Stale comment

Risk: medium. Not approving: Cursor Bugbot reported one unresolved high-severity finding on the latest commit (run_query empty-expected handling), and the Bugbot check finished as skipped. dig-whois and simonzelenskifbio are already assigned as reviewers.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}

[cursor]

Risk: medium. Approved: Cursor Bugbot passed on the latest commit with no unresolved findings, and no Cursor Security Agent check was present. dig-whois and simonzelenskifbio remain assigned as reviewers.

  

_{Sent by Cursor Approval Agent: Pull Request Router and Approver}

[fireboltdb-docs-integration]

Packdb docs aggregation ready for review

Docs were merged to main and aggregated into packdb.

• Packdb PR: https://github.com/firebolt-analytics/packdb/pull/24080

Squash-merge the packdb PR into master to publish the docs. Urgent fixes can be cherry-picked to the active release/packdb-* branch like any other docs change.