docs/tests: scrub internal merchant references + private test default

- agentscore_commerce/identity/policy.py: drop the "extracted from
  <internal merchant>" attribution paragraph
- examples/per_product_policy_merchant.py: drop the same attribution
- tests/test_integration.py: integration tests now require both
  AGENTSCORE_API_KEY and AGENTSCORE_BASE_URL to be set; no default to a
  private (`*.internal`) endpoint

Author: vvillait88

agentscore_commerce/identity/policy.py

@@ -21,10 +21,8 @@
    return a structured :class:`GateResult`.
 
 All three are additive — vendors that don't need per-product policy can keep
-using ``AgentScoreGate(...)`` directly. The pattern was extracted from the
-``agentscore/store`` merchant; see its ``store/routes/purchase.py`` for the
-full per-request flow including shipping checks (which most merchants will
-implement adjacent to the gate).
+using ``AgentScoreGate(...)`` directly. Most merchants will implement shipping
+checks adjacent to the gate per-request.
 """
 
 from __future__ import annotations

examples/per_product_policy_merchant.py

@@ -17,10 +17,6 @@
     - shipping_country_allowed / shipping_state_allowed
         Per-product shipping allowlists (NULL = ship anywhere).
 
-The pattern was extracted from agentscore/store. See its
-``store/routes/purchase.py`` for the full per-request flow including code
-redemption + order persistence.
-
 Peer deps:
     pip install agentscore-commerce[fastapi]
 

tests/test_integration.py

@@ -4,10 +4,13 @@
 import pytest
 
 API_KEY = os.environ.get("AGENTSCORE_API_KEY")
-BASE_URL = os.environ.get("AGENTSCORE_BASE_URL", "http://api.dev.agentscore.internal")
+BASE_URL = os.environ.get("AGENTSCORE_BASE_URL")
 TEST_ADDRESS = "0x339559a2d1cd15059365fc7bd36b3047bba480e0"
 
-pytestmark = pytest.mark.skipif(not API_KEY, reason="AGENTSCORE_API_KEY not set")
+pytestmark = pytest.mark.skipif(
+    not (API_KEY and BASE_URL),
+    reason="AGENTSCORE_API_KEY and AGENTSCORE_BASE_URL must both be set",
+)
 
 
 def _assess(body=None):