fix: Sync ANTHROPIC_API_KEY to Modal environments

The agent_sandbox.py references Modal secret 'anthropic-api-key'
but it was never created by the deploy pipeline. Add it to
modal-sync-secrets.sh and pass the key from GitHub secrets.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: anth-volk

.github/scripts/modal-sync-secrets.sh

@@ -1,7 +1,7 @@
 #!/bin/bash
 # Sync secrets from GitHub Actions to a Modal environment
 # Usage: ./modal-sync-secrets.sh <modal-environment> <logfire-environment>
-# Required env vars: SUPABASE_DB_URL, SUPABASE_URL, SUPABASE_KEY, SUPABASE_SECRET_KEY, LOGFIRE_TOKEN
+# Required env vars: SUPABASE_DB_URL, SUPABASE_URL, SUPABASE_KEY, SUPABASE_SECRET_KEY, LOGFIRE_TOKEN, ANTHROPIC_API_KEY
 set -euo pipefail
 
 MODAL_ENV="${1:?Modal environment required (staging or main)}"
@@ -24,4 +24,9 @@ uv run modal secret create policyengine-logfire \
   --env="$MODAL_ENV" \
   --force
 
+uv run modal secret create anthropic-api-key \
+  "ANTHROPIC_API_KEY=${ANTHROPIC_API_KEY}" \
+  --env="$MODAL_ENV" \
+  --force
+
 echo "Secrets synced to Modal environment: $MODAL_ENV"

.github/workflows/deploy.yml

@@ -211,6 +211,7 @@ jobs:
           SUPABASE_KEY: ${{ secrets.SUPABASE_KEY }}
           SUPABASE_SECRET_KEY: ${{ secrets.SUPABASE_SECRET_KEY }}
           LOGFIRE_TOKEN: ${{ secrets.LOGFIRE_TOKEN }}
+          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
         run: |
           chmod +x .github/scripts/*.sh
           .github/scripts/modal-sync-secrets.sh staging staging
@@ -329,6 +330,7 @@ jobs:
           SUPABASE_KEY: ${{ secrets.SUPABASE_KEY }}
           SUPABASE_SECRET_KEY: ${{ secrets.SUPABASE_SECRET_KEY }}
           LOGFIRE_TOKEN: ${{ secrets.LOGFIRE_TOKEN }}
+          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
         run: |
           chmod +x .github/scripts/*.sh
           .github/scripts/modal-sync-secrets.sh main prod

changelog.d/sync-anthropic-key-modal.fixed

@@ -0,0 +1 @@
+Sync ANTHROPIC_API_KEY to Modal environments via deploy pipeline, fixing agent sandbox deploy failure.