docs: update .env.example with SDLC environment documentation

.env.example

@@ -1,54 +1,48 @@
 # EuchreCamp Environment Configuration
-# Copy this file to .env and fill in your values
+# ============================================
+# Copy this file to .env (for local dev) or use
+# .env.development / .env.ci for specific environments
 
 # ============================================
 # Database Configuration
 # ============================================
-# PostgreSQL connection string
+# IMPORTANT: Use the appropriate DATABASE_URL for your environment:
-# Format: postgresql://username:password@host:port/database
+#
-DATABASE_URL=postgresql://euchre:euchrepassword@localhost:5432/euchre_camp
+# - Development (ephemeral, synced from prod):  euchre_camp_dev
+# - CI/Testing (reset before each run):        euchre_camp_ci  
+# - Production (DO NOT USE FOR TESTS):         euchre_camp
+#
+# The .credentials file in the project root contains
+# the actual connection strings - DO NOT commit .credentials
 
-# Shadow database for Prisma migrations (optional for PostgreSQL)
-DATABASE_SHADOW_URL=postgresql://euchre:euchrepassword@localhost:5432/euchre_camp_shadow
-
-# Database provider (postgresql)
 DATABASE_PROVIDER=postgresql
 
 # ============================================
 # Better Auth Configuration
 # ============================================
-# Secret key for session encryption (generate a strong random string)
+# Generate a new secret with: openssl rand -base64 32
-# Run: openssl rand -base64 32
+BETTER_AUTH_SECRET=generate-new-secret-in-production
-BETTER_AUTH_SECRET=your-secret-key-change-in-production
 
-# Base URL for authentication callbacks
+# Base URL - update for production
-# For production: https://your-domain.com
 BETTER_AUTH_URL=http://localhost:3000
 
 # ============================================
 # Application Configuration
 # ============================================
-# Environment: development, production, test
+NODE_ENV=development
-NODE_ENV=production
 
-# Trusted origins for CORS and authentication
+# Comma-separated list of trusted origins
-# Add your domain(s) for production
 TRUSTED_ORIGINS=http://localhost:3000,http://127.0.0.1:3000
 
 # ============================================
-# Optional: External Services
+# Environment-Specific Overrides
 # ============================================
-# If using external database (e.g., Supabase, Railway)
+# For development (.env.development):
-# DATABASE_URL=postgresql://user:pass@host:port/db
+#   DATABASE_URL from .credentials (euchre_camp_dev)
-
+#   NODE_ENV=development
-# If using external auth provider
+#   BETTER_AUTH_URL=http://localhost:3000
-# BETTER_AUTH_URL=https://your-app.com
+#
-
+# For CI (.env.ci):
-# ============================================
+#   DATABASE_URL from .credentials (euchre_camp_ci)
-# CasaOS Deployment Notes
+#   NODE_ENV=test
-# ============================================
+#   BETTER_AUTH_URL=http://localhost:3000
-# When deploying to CasaOS, set these via the UI:
-# 1. DATABASE_URL: Your PostgreSQL connection string
-# 2. BETTER_AUTH_SECRET: Generate with: openssl rand -base64 32
-# 3. BETTER_AUTH_URL: Your app's public URL
-# 4. TRUSTED_ORIGINS: Your app's public URL(s)

.gitignore

@@ -59,3 +59,4 @@ playwright-report/
 
 cucumber-pretty
 .env.production
+.credentials