feat(lakehouse-agent): flag-routed Okta + OBO alongside Cognito

02-use-cases/01-conversational-agents/lakehouse-agent/.env.example

@@ -1,4 +1,23 @@
+# Copy this file to `.env` IN THIS DIRECTORY (the sample root) and fill in the values.
+# `deployment/.env` is also read; the loader prints which file it used and warns
+# about any other .env it found but did not read.
+
+# The IdP (cognito|okta) is chosen in notebook 01-deploy-idp.ipynb (Step 0), NOT here.
+
+# Okta path only (IDP_PROVIDER=okta): the Okta setup reads these from .env.
+#
+# OKTA_API_TOKEN must be created by an admin whose role can manage
+# AUTHORIZATION SERVERS, APPLICATIONS, GROUPS and USERS -- setup_okta.py writes to
+# all four. Super Admin is the simple choice on a free Integrator tenant. There is
+# no pre-flight permission check, so a narrower token fails partway through with a
+# 403. The token is NOT removed by teardown (you created it, so the sample cannot
+# revoke it) -- revoke it yourself at Security > API > Tokens when you are done.
+# See deployment/1-okta-setup/README.md.
+#
+# OKTA_ORG_URL=dev-12345678.okta.com
+# OKTA_API_TOKEN=
+
 AWS_DEFAULT_REGION=us-east-1
 AWS_ACCESS_KEY_ID=
 AWS_SECRET_ACCESS_KEY=
-AWS_SESSION_TOKEN=
+AWS_SESSION_TOKEN=

02-use-cases/01-conversational-agents/lakehouse-agent/.gitignore

@@ -60,3 +60,19 @@ htmlcov/
 Dockerfile
 .agentcore.yaml
 .agentcore.json
+
+# AgentCore CLI projects (one per runtime, deployment/<runtime>/agentcore/):
+# deployer-specific state and build output. aws-targets.json carries the
+# deploying account ID and is written by the deploy wrapper at deploy time;
+# .cli/ holds deployed ARNs.
+deployment/*/agentcore/aws-targets.json
+deployment/*/agentcore/.cli/
+deployment/*/agentcore/.cache/
+deployment/*/agentcore/.env.local
+deployment/*/agentcore/*.zip
+deployment/*/agentcore/*/staging/
+deployment/*/agentcore/cdk/cdk.out/
+deployment/*/agentcore/cdk/node_modules/
+deployment/*/agentcore/cdk/dist/
+# The repository-level lib/ rule would otherwise hide the CDK stack source.
+!deployment/*/agentcore/cdk/lib/