DATABASE_URL="file:./dev.db"
SESSION_SECRET="replace-with-a-long-random-secret"
INIT_DEFAULT_PASSWORD="replace-with-initial-password"
# Optional: if set, /api/settings/init requires header x-init-token
INIT_SETUP_TOKEN="replace-with-one-time-init-token"
