Overall I like the direction this code is taking. Reviewing all the changes took more time than I expected because the PR covers a lot of ground. In the future we should keep PRs more tightly scoped so they're easier to review and reason about. For example, this PR could be broken into these separate PRs:
Replace pushy_util:get_env calls with envy
Add sha256 HMAC message signatures
Change routing of configuration endpoint to use org//
Clean up command switch API
Each of these PRs represent standalone work which combines to achieve the same goal while remaining easy to review individually.
Overall I like the direction this code is taking. Reviewing all the changes took more time than I expected because the PR covers a lot of ground. In the future we should keep PRs more tightly scoped so they're easier to review and reason about. For example, this PR could be broken into these separate PRs:
Each of these PRs represent standalone work which combines to achieve the same goal while remaining easy to review individually.