Labels: stage-4, security, backend, ops
Depends on: S4.1-01
Acceptance Criteria:
[ ] Required env vars are validated at startup.
[ ] Startup fails fast with clear errors when required secrets are missing.
[ ] Environment examples are updated for dev and staging.
[ ] CORS and cookie/security settings are explicit and environment-aware.
[ ] No secrets are committed in repository files.
Labels: stage-4, security, backend, ops
Depends on: S4.1-01
Acceptance Criteria:
[ ] Required env vars are validated at startup.
[ ] Startup fails fast with clear errors when required secrets are missing.
[ ] Environment examples are updated for dev and staging.
[ ] CORS and cookie/security settings are explicit and environment-aware.
[ ] No secrets are committed in repository files.