apollo_node_config,apollo_node,deployment: source private_parameters from secrets schema, drop value config schema

[nimrod-starkware]

private_parameters() now reads the committed config_secrets_schema.json (a BTreeSet of
ParamPath) instead of deriving from config_schema.json + CONFIG_POINTERS at runtime,
removing the runtime dependency on both. Delete the value config_schema.json (4147 lines)
and the CONFIG_SCHEMA_PATH const (the native loader never read it; the per-param CLI
parser that did is gone), and remove its now-broken COPY from the sequencer Dockerfile.
Repurpose update_apollo_node_config_schema to regenerate ONLY the secrets schema, and
split the up-to-date guard to assert only the secrets schema. A transient equivalence test
(private_parameters_matches_config_dump_derivation) proves the file-sourced set equals the
old dump()+CONFIG_POINTERS derivation (no drift); it is marked for removal with the later
SerializeConfig/CONFIG_POINTERS teardown.

config_secrets_schema.json regenerates byte-identical; apollo_node_config 30/30 and
apollo_deployments 9/9 green.

Co-Authored-By: Claude Opus 4.8 (1M context) noreply@anthropic.com

[reviewable-StarkWare]

This change is 

[nimrod-starkware]

Warning

This pull request is not mergeable via GitHub because a downstack PR is open. Once all requirements are satisfied, merge this PR as a stack on Graphite.
Learn more

• apollo_deployments: delete Rust component-config topology mirror #14688
• apollo_deployments,apollo_integration_tests: source harness component configs from jsonnet #14687
• deployment: drop redundant YAML sequencerConfig; source port-uniqueness from jsonnet #14659
• apollo_config,workspace: remove SerializeConfig trait and preset-dump machinery #14654
• apollo_config,apollo_node_config,apollo_config_manager: rework get_config_presentation off dump() #14653
• apollo_node_config,apollo_node: delete CONFIG_POINTERS data and pointer-remap from secrets bin #14652
• apollo_node_config,apollo_config_manager,apollo_integration_tests: retire preset config-generation path #14651
• apollo_node_config,apollo_deployments: assert cross-component equality for formerly-pointer-resolved fields #14650
• apollo_deployments: delete base app_configs and the preset-parity test machinery #14649
• apollo_node_config,apollo_node,deployment: source private_parameters from secrets schema, drop value config schema #14648 👈 (View in Graphite)
• apollo_deployments: retire dead preset/replacer generation machinery #14647
• deployment,apollo_deployments: drop config_format plumbing and retire preset config path #14646
• deployment: add native config layers for the testing overlays #14645
• deployment: add dummy_for_testing native config override layer #14632
• apollo_config: make native the sole config-load path #14631
• apollo_config,apollo_node_config: make config fields with custom deserializers serialize symmetrically #14630
• apollo_integration_tests,apollo_node_config: load integration-test node config via native format #14629
• apollo_deployments: expose jsonnet build() evaluator behind a testing feature #14686
• deployment: extract base-layer start-block numbers into shared constants #14685
• deployment: add mainnet native config override layer #14628
• deployment: add sepolia-alpha native config override layer #14627
• apollo_deployments: test overrides list match #14626
• deployment: add sepolia-integration native config override (chain_params + replacers) #14674
• deployment: add native node-config builder and wire it into the ConfigMap #14609 : 1 other dependent PR (#14655 )
• deployment: thread config_format from CLI to node container arg #14608
• apollo_deployments,deployment: set storage-reader-server ports as constants #14607
• apollo_node: add new CLI arg to parse config #14606
• apollo_deployments: check applicative config matches deployed app_configs #14489 : 2 other dependent PRs (#14480 , #14505 )
• apollo_deployments: assemble and deserialize node config from jsonnet #14487
• apollo_deployments: assemble full node config via build.libsonnet #14486
• apollo_deployments: distributed layout jsonnet test #14485
• apollo_deployments: consolidated layout jsonnet test #14484
• apollo_deployments: test hybrid layout for infra config #14483
• apollo_deployments: introduce hybrid layout for infra config #14482
• apollo_deployments: introduce jsonnet building blocks for infra config #14481
• apollo_deployments: jsonnet applicative config #14479
• main

This stack of pull requests is managed by Graphite. Learn more about stacking.

[cursor]

PR Summary

Medium Risk
Touches how private/secret config keys are resolved at runtime and deployment packaging; behavior is guarded by equivalence and up-to-date tests, but operators or tools that still expected config_schema.json would break.

Overview
private_parameters() now loads the committed config_secrets_schema.json (a serialized BTreeSet of param paths) instead of scanning the old full value schema and applying CONFIG_POINTERS at runtime.

The large config_schema.json artifact and CONFIG_SCHEMA_PATH are removed; the sequencer Dockerfile no longer copies that file. update_apollo_node_config_schema only regenerates the secrets schema from a config dump + pointers, and default_config_file_is_up_to_date checks that file alone. A transient test asserts file-sourced private params still match the historical dump derivation.

^{Reviewed by Cursor Bugbot for commit 06d2a21. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 16c545d. Configure here.}