Report secrets bootstrap outcomes safely

internal/app/command_dependencies.go

@@ -2,6 +2,7 @@ package app
 
 import (
 	"context"
+	"io"
 
 	configkit "gitea.maximumdirect.net/eric/ConfigKit"
 	"gitea.maximumdirect.net/eric/narratio/internal/adapters/storage"
@@ -9,6 +10,7 @@ import (
 )
 
 type commandDependencies struct {
+	diagnostics                io.Writer
 	loadPipelineConfig         func(string, config.PipelineLoadOptions) (*config.PipelineConfig, error)
 	downloadObjectToTemp       func(context.Context, storage.ObjectStore, string, string) (string, error)
 	loadSecretsDir             func(string) (*configkit.SecretsReport, error)
@@ -20,6 +22,9 @@ type commandDependencies struct {
 }
 
 func normalizeCommandDependencies(deps commandDependencies) commandDependencies {
+	if deps.diagnostics == nil {
+		deps.diagnostics = io.Discard
+	}
 	if deps.loadPipelineConfig == nil {
 		deps.loadPipelineConfig = config.LoadPipelineWithOptions
 	}