feat: Add flexible GitHub App private key configuration

- Updated .env.example with two options for GitHub App private key configuration
- Added `PRIVATE_KEY_PATH` as a secure alternative to directly pasting private key contents
- Updated README and techContext.md to document the new configuration option
- Improved documentation for GitHub App private key setup and security recommendations

Author: stevengonsalvez

.env.example

@@ -11,12 +11,18 @@ WEBHOOK_PROXY_URL=
 # GitHub App Setup (required)
 # Your GitHub App's private key, get this from the GitHub App settings page
 # To generate: Go to https://github.com/settings/apps -> Your app -> General -> Private keys -> Generate a private key
-# Copy the contents of the downloaded .pem file and paste it here
+#
+# You need EITHER Option 1 OR Option 2 below (not both):
+#
+# OPTION 1: Copy the contents of the downloaded .pem file and paste it here
 # For multi-line values in .env, use quotes and \n for line breaks:
 PRIVATE_KEY="-----BEGIN RSA PRIVATE KEY-----
 ...
 -----END RSA PRIVATE KEY-----"
 
+# OPTION 2: Specify the path to your private key file (recommended for security)
+# PRIVATE_KEY_PATH=/path/to/your/private-key.pem
+
 # patchmycode Configuration
 # API keys for LLM services (required for code fixing)
 # OpenAI API Key - Required for GPT models

README.md

@@ -150,7 +150,8 @@ npm start
 
 #### Core Configuration
 - `APP_ID`: Your GitHub App ID
-- `PRIVATE_KEY`: Your GitHub App's private key
+- `PRIVATE_KEY`: Your GitHub App's private key (contents of the .pem file)
+- `PRIVATE_KEY_PATH`: Alternative to PRIVATE_KEY, specify path to the .pem file (recommended for security)
 - `WEBHOOK_SECRET`: Your GitHub App's webhook secret
 - `WEBHOOK_PROXY_URL`: URL for webhook proxying (for local development with smee.io)
 - `LOG_LEVEL`: Logging level (`debug`, `info`, `warn`, or `error`)

memory-bank/techContext.md

@@ -41,7 +41,8 @@
 
 ### Environment Variables
 - `APP_ID`: GitHub App ID from GitHub App registration
-- `PRIVATE_KEY`: Private key from GitHub App registration
+- `PRIVATE_KEY`: Private key from GitHub App registration (contents of the .pem file)
+- `PRIVATE_KEY_PATH`: Alternative to PRIVATE_KEY, path to the .pem file (recommended)
 - `WEBHOOK_SECRET`: Secret for webhook verification
 - `WEBHOOK_PROXY_URL`: URL for local development webhook forwarding
 - `LOG_LEVEL`: Logging level (debug, info, warn, error)