feat: Standardize KMS context key to 'env'

This commit standardizes the KMS encryption context to use the key 'env' instead of 'environment' for consistency.

The following changes have been made:
- Modified  to use 'env' in the encryption context for the  and  commands.
- Modified  to use 'env' in the encryption context for the  function.
- Updated  to reflect the changes in the encryption context.
- Added verbose logging to the  command in .

Author: kthhrv

src/envars/cli.py

@@ -295,7 +295,7 @@ def add_env_var(
             "app": manager.app or "",
         }
         if env:
-            encryption_context["environment"] = env
+            encryption_context["env"] = env
         if loc:
             encryption_context["location"] = loc
 
@@ -647,7 +647,7 @@ def rotate_kms_key(
                 "app": new_manager.app or "",
             }
             if vv.environment_name:
-                encryption_context["environment"] = vv.environment_name
+                encryption_context["env"] = vv.environment_name
             if vv.location_id:
                 loc_name = next(
                     (l.name for l in new_manager.locations.values() if l.location_id == vv.location_id), None

src/envars/main.py

@@ -293,7 +293,7 @@ def _get_decrypted_value(manager: VariableManager, vv: VariableValue):
     # Get encryption context from the variable's scope
     encryption_context = {"app": manager.app or ""}
     if vv.environment_name:
-        encryption_context["environment"] = vv.environment_name
+        encryption_context["env"] = vv.environment_name
     if vv.location_id:
         loc_name = next((l.name for l in manager.locations.values() if l.location_id == vv.location_id), None)
         if loc_name:

tests/test_cli.py

@@ -150,7 +150,7 @@ def test_add_secret_variable(tmp_path):
             {
                 "KeyId": "arn:aws:kms:us-east-1:123456789012:key/mrk-12345",
                 "Plaintext": b"super_secret_value",
-                "EncryptionContext": {"app": "MyApp", "environment": "dev", "location": "my_loc"},
+                "EncryptionContext": {"app": "MyApp", "env": "dev", "location": "my_loc"},
             },
         )
         with patch("boto3.client", return_value=kms_client):
@@ -250,7 +250,7 @@ def test_print_decrypt_secret(tmp_path):
             {"Plaintext": b"decrypted_value"},
             {
                 "CiphertextBlob": b"some_encrypted_bytes",
-                "EncryptionContext": {"app": "MyApp", "environment": "dev", "location": "my_loc"},
+                "EncryptionContext": {"app": "MyApp", "env": "dev", "location": "my_loc"},
             },
         )
         with patch("boto3.client", return_value=kms_client):
@@ -527,7 +527,7 @@ def test_output_yaml_command(tmp_path):
             {"Plaintext": b"decrypted_value"},
             {
                 "CiphertextBlob": b"some_encrypted_bytes",
-                "EncryptionContext": {"app": "MyApp", "environment": "dev", "location": "my_loc"},
+                "EncryptionContext": {"app": "MyApp", "env": "dev", "location": "my_loc"},
             },
         )
         with patch("boto3.client", return_value=kms_client):