Posts to Slack as a bot, and verifies the requests Slack sends back. The bot token identifies your application, the signing secret proves an incoming request really came from Slack, and the channel id is where messages land. Scope the token to the channels it needs: a bot token is not read-only, and one granted broadly can read far more of a workspace than the feature requires.
An admin enters these once, and the platform injects them as environment variables at deploy time. Your code reads them. It never sees a login screen or an SDK for this.
SLACK_BOT_TOKENSLACK_SIGNING_SECRETSLACK_CHANNEL_ID