- POSTGRES_PASSWORD and DB URLs now match what docker-compose.override.yml
and init-postgres.sql actually use (postgres/postgres, app_password)
- CREDENTIAL_ENCRYPTION_KEY is now valid base64 (32 bytes) so the API
actually starts instead of crashing on the Pydantic validator
- JWT_SECRET_KEY is a dev-only value (insecure defaults check skips dev)
- Added quick-start comment block with login credentials
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>