Environment Variables

!!! warning "Placeholder" Provide a canonical list of environment variables and where they are set (compose, .env, secrets).

Policy (draft)

• Never commit secrets
• Prefer .env for non-secrets and mounted files for secrets
• Document defaults and required values