feat: convert secret-sources into a plugin (B20)

src/backend/database/routes/user-settings-routes.ts

@@ -14,7 +14,6 @@ import {
 } from "../../utils/audit-forwarder.js";
 import { getTelemetryEnvOverride } from "../../utils/analytics.js";
 import { STEP_CA_PRIVATE_ALLOWLIST_KEY } from "../../utils/step-ca-egress.js";
-import { SECRET_SOURCE_PRIVATE_ALLOWLIST_KEY } from "../../utils/secret-source-egress.js";
 import {
   NOTIFICATION_PRIVATE_ALLOWLIST_KEY,
   parseNotificationAllowlist,
@@ -582,25 +581,6 @@ export function registerUserSettingsRoutes(
     "Step CA endpoint",
   );
 
-  /**
-   * @openapi
-   * /users/secret-source-private-endpoints:
-   *   get:
-   *     summary: Get the private hosts secret sources (1Password Connect) may contact (admin only)
-   *     tags:
-   *       - Users
-   *   patch:
-   *     summary: Replace that allowlist (admin only)
-   *     tags:
-   *       - Users
-   */
-  registerPrivateEndpointAllowlist(
-    "/secret-source-private-endpoints",
-    SECRET_SOURCE_PRIVATE_ALLOWLIST_KEY,
-    "update_secret_source_private_endpoints",
-    "secret source endpoint",
-  );
-
   /**
    * @openapi
    * /users/step-ca-settings: