Summary

Introduce explicit boolean flags allow_all_channels and allow_all_users to replace the overloaded empty-list semantics, and revert #398 (empty allowed_channels no longer denies all).

Changes

1. Revert #398

Restores allowed_channels = [] to mean allow-all (original behavior). With explicit flags, the empty-list hack is no longer needed.

2. New flags with auto-detect

Both flags default to true (allow all). When not explicitly set in config.toml, auto-detected from the list:

if allow_all_* is explicitly set → use it
else if allowed_* is non-empty   → false (respect the list)
else                              → true  (allow all)

3. Helm always renders explicit flags

# Auto-inferred from list when user doesn't set the flag:
allow_all_channels = {{ if hasKey .discord "allowAllChannels" }}...{{ else if .discord.allowedChannels }}false{{ else }}true{{ end }}

Files Changed

• src/config.rs: Option<bool> fields + resolve_allow_all() helper
• src/discord.rs: Channel/user filtering uses resolved flags
• src/slack.rs: Same
• src/main.rs: Resolves flags, logs them, warns on deny-all scenarios
• charts/openab/templates/configmap.yaml: Always renders explicit flags
• charts/openab/values.yaml: Documents new flags
• config.toml.example: Documents new flags

Backward Compatibility

Zero config changes required for any existing deployment:

• Pre-fix(discord/slack/helm): empty allowed_channels denies all channels (secure by default) #398 users (allowed_channels = []): auto-inferred as allow_all_channels = true ✓
• Post-fix(discord/slack/helm): empty allowed_channels denies all channels (secure by default) #398 users (allowed_channels = ["123"]): auto-inferred as allow_all_channels = false ✓
• allowed_users = []: auto-inferred as allow_all_users = true ✓

Closes #475