[rafikbahri]

Summary

Connect TheHive to TheHive Flow (TheHive 6 settings from the official documentation).

Changes

• prod1-thehive, prod2-thehive: documented in application.conf how to enable the connection. The settings go in thehive/config/flow.conf (holds the JWT signing key: mode 600, gitignored, enforced by check_permissions.sh), loaded by a commented include required("/etc/thehive/flow.conf"). Self-signed certificate: trust store recommended, acceptAnyCertificate marked insecure
• testing: connection enabled. init.sh writes thehive/config/flow.conf (mode 600 from creation, gitignored, removed by reset.sh) with the validated JWT signing key of .env; application.conf requires it
• tests/flow.sh, run in CI: Orchestrator feature reported by TheHive, unsigned request rejected by TheHive Flow (401), TheHive signed requests accepted since its last start (fails on any 401/403)
• CI: step showing images and service state

Tests

Clean local run in CI order (init, up, readiness, flow.sh, smoke.sh, storage.sh): all pass. flow.sh fails with a wrong signing key, also on a reused stack. TheHive refuses to start without flow.conf.

Not included

TheHive API key for TheHive Flow: testing keeps the placeholder.

Closes #44