feat: WhatsApp notifications — new incident alert and CAPA overdue escalation

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FFDuBhMKvoWjrWT3ZnGmmr

app/api/settings/route.ts

@@ -3,7 +3,12 @@ export const dynamic = 'force-dynamic'
 import { NextRequest, NextResponse } from 'next/server'
 import { createClient } from '@/lib/supabase/server'
 
-const ALLOWED_KEYS = ['ANTHROPIC_API_KEY', 'VOYAGE_API_KEY'] as const
+const ALLOWED_KEYS = [
+  'ANTHROPIC_API_KEY',
+  'VOYAGE_API_KEY',
+  'META_WHATSAPP_PHONE_NUMBER_ID',
+  'META_WHATSAPP_ACCESS_TOKEN',
+] as const
 type SettingKey = typeof ALLOWED_KEYS[number]
 
 async function requireAdmin(supabase: Awaited<ReturnType<typeof createClient>>) {