Make a Langfuse trace worth opening: question, answer, session, no probe noise

infra/helm/medical-chatbot/values.yaml

@@ -17,6 +17,11 @@ secret:
   # Set when postgres runs in a different Application/release (the
   # data/app split pattern) — overrides the default in-release host.
   postgresHost: ""
+  # Langfuse project API keys. Real credentials -- set these inline on the
+  # ArgoCD Application or a pre-created Secret, never in a tracked values
+  # file. Leaving them empty simply means no Langfuse export.
+  langfusePublicKey: ""
+  langfuseSecretKey: ""
   grafanaAdminPassword: change-me
   # Required (chart render fails without it) once authService or apiGateway
   # is enabled — signs/verifies every JWT. Must be the same value both
@@ -76,6 +81,11 @@ aiService:
     metricsEnabled: true
     otelEnabled: true
     otelSampleRatio: 1.0
+    # Empty by default: Langfuse is an optional second trace destination.
+    # Setting this alone is inert -- the keys live in the Secret (see
+    # `secret.langfusePublicKey`), and ai-service adds the exporter only when
+    # URL + both keys are present.
+    langfuseBaseUrl: ""
     maxWallClockMs: 40000
     maxLlmCallsPerTurn: 8
   migration: