alot more changes

scripts/upload-sourcemap.sh

@@ -2,6 +2,7 @@
 set -euo pipefail
 
 : "${OTEL_URL:?set OTEL_URL, for example https://otel.example.com}"
+: "${OTEL_SOURCEMAP_KEY:?set OTEL_SOURCEMAP_KEY to the shared upload key}"
 : "${RELEASE:?set RELEASE to the exact VITE_APP_RELEASE used at build time}"
 
 bundle="${1:?usage: RELEASE=... OTEL_URL=... $0 dist/assets/index-HASH.js}"
@@ -11,6 +12,7 @@ test -f "$map" || { echo "source map not found: $map" >&2; exit 1; }
 
 source_path="/${bundle#*/dist/}"
 curl --fail-with-body --silent --show-error \
+  -H "X-Sourcemap-Key: ${OTEL_SOURCEMAP_KEY}" \
   -X POST "${OTEL_URL%/}/api/sourcemaps" \
   -F "release=${RELEASE}" \
   -F "source=${source_path}" \