fix: address review findings on plugin/runtime and CI portability

.github/workflows/docs-deploy.yml

@@ -73,6 +73,11 @@ jobs:
               with:
                   fetch-depth: 0
 
+            - name: Setup Node.js
+              uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
+              with:
+                  node-version: "22"
+
             - name: Resolve docs diff scope
               id: scope
               shell: bash

src/config/schema.rs

@@ -5353,6 +5353,9 @@ pub struct WatiConfig {
     ///
     /// Supports `X-Hub-Signature-256` HMAC verification and Bearer-token fallback.
     /// Can also be set via `ZEROCLAW_WATI_WEBHOOK_SECRET`.
+    /// Default: `None` (unset).
+    /// Compatibility/migration: additive key for existing deployments; set this
+    /// before enabling inbound WATI webhooks. Remove (or set null) to roll back.
     #[serde(default)]
     pub webhook_secret: Option<String>,
     /// Tenant ID for multi-channel setups (optional).