Add email notifications (sendmail) + membership sweep (scheduler): welcome email on webhook, reconcile endpoint, daily sweep

sweep.sh

@@ -0,0 +1,35 @@
+#!/bin/sh
+# Membership reconciliation sweep — run by the Cloudron scheduler addon.
+#
+# Calls the portal's own /admin/sweep endpoint (localhost), which reconciles
+# the portal against the live Open Collective member list: provisions missing
+# members, deactivates lapsed members, and syncs Loomio.
+#
+# The WEBHOOK_TOKEN env var is shared with the main app (scheduler runs in the
+# same launch environment), so we use it to authenticate the call.
+#
+# Uses Python (guaranteed present in the base image) rather than curl.
+
+set -e
+
+if [ -z "$WEBHOOK_TOKEN" ]; then
+  echo "sweep: WEBHOOK_TOKEN not set; aborting" >&2
+  exit 1
+fi
+
+python3 - "$WEBHOOK_TOKEN" <<'PY'
+import sys, urllib.request, urllib.error
+
+token = sys.argv[1]
+url = f"http://127.0.0.1:8000/admin/sweep/{token}"
+req = urllib.request.Request(url, method="POST", data=b"", headers={"Content-Type": "application/json"})
+try:
+    with urllib.request.urlopen(req, timeout=60) as resp:
+        print("sweep:", resp.read().decode())
+except urllib.error.HTTPError as e:
+    print(f"sweep: HTTP {e.code}: {e.read().decode()}", file=sys.stderr)
+    sys.exit(1)
+except Exception as e:
+    print(f"sweep: request failed: {e}", file=sys.stderr)
+    sys.exit(1)
+PY