security: 添加Bedrock模型ARN参数，支持环境变量注入

- 添加BedrockHaikuModelArn、BedrockSonnetModelArn、BedrockOpusModelArn参数
- 参数可选且使用NoEcho保护敏感信息
- 创建samconfig.toml.example模板供参考

Author: BukeLy

samconfig.toml.example

@@ -0,0 +1,17 @@
+version = 0.1
+
+[default.build.parameters]
+use_container = true
+
+[default.deploy.parameters]
+stack_name = "omnicloud-agent"
+confirm_changeset = true
+capabilities = "CAPABILITY_IAM"
+resolve_s3 = true
+s3_prefix = "omnicloud-agent"
+profile = "YOUR_AWS_PROFILE"  # 替换为你的AWS profile
+disable_rollback = true
+image_repositories = ["AgentServerFunction=YOUR_ACCOUNT_ID.dkr.ecr.us-east-1.amazonaws.com/omnicloudagentea80e707/agentserverfunction769568e1repo"]  # 替换为你的AWS账户ID和ECR仓库
+
+[default.global.parameters]
+region = "us-east-1"

template.yaml

@@ -16,6 +16,21 @@ Parameters:
     Type: String
     Default: 'change-me-in-production'
     NoEcho: true
+  BedrockHaikuModelArn:
+    Type: String
+    Default: ''
+    Description: (Optional) ARN for Bedrock Haiku model (format: arn:aws:bedrock:REGION:ACCOUNT:application-inference-profile/PROFILE_ID)
+    NoEcho: true
+  BedrockSonnetModelArn:
+    Type: String
+    Default: ''
+    Description: (Optional) ARN for Bedrock Sonnet model (format: arn:aws:bedrock:REGION:ACCOUNT:application-inference-profile/PROFILE_ID)
+    NoEcho: true
+  BedrockOpusModelArn:
+    Type: String
+    Default: ''
+    Description: (Optional) ARN for Bedrock Opus 4.5 model (format: arn:aws:bedrock:REGION:ACCOUNT:application-inference-profile/PROFILE_ID)
+    NoEcho: true
 
 Globals:
   Function: