fix: update .env.example and verify repo hygiene (#6)

- Updated .env.example with all current env vars (no secrets)
- Verified no .env, .db, or test-results tracked in repo
- .gitignore already covers: .env*, *.db*, services/**/.env, data/, test-results/

Closes #6

.env.example

@@ -1,12 +1,58 @@
 TZ=America/Chicago
 
-PLATFORM_ORIGIN=http://localhost:3000
+# Platform admin (required — no defaults)
+ADMIN_USERNAME=admin
+ADMIN_PASSWORD=CHANGE_ME
+ADMIN_DISPLAY_NAME=Admin
 
-TRIPS_BACKEND_URL=http://trips-service:8087
-TRIPS_FRONTEND_LEGACY_URL=http://trips-legacy-frontend:3000
-TRIPS_API_TOKEN_KEY=api_token
+# External URLs
+PLATFORM_ORIGIN=https://dash.quadjourney.com
+PLATFORM_V2_ORIGIN=https://dash.quadjourney.com
 
-FITNESS_BACKEND_URL=http://fitness-service:8095
-FITNESS_FRONTEND_LEGACY_URL=http://fitness-legacy-frontend:3000
-FITNESS_API_TOKEN_KEY=session_token
+# Service tokens
+TRIPS_API_TOKEN=
+NOCODB_API_TOKEN=
+MINIFLUX_URL=http://miniflux:8080
+MINIFLUX_API_KEY=
 
+# Immich (photo library)
+IMMICH_URL=
+IMMICH_API_KEY=
+
+# Karakeep (bookmarks)
+KARAKEEP_URL=
+KARAKEEP_API_KEY=
+
+# Booklore (book library)
+BOOKLORE_URL=http://booklore:6060
+BOOKLORE_USER=
+BOOKLORE_PASS=
+
+# SMTP2GO (email / Send to Kindle)
+SMTP2GO_API_KEY=
+SMTP2GO_FROM_EMAIL=
+SMTP2GO_FROM_NAME=Platform
+KINDLE_EMAIL_1=
+KINDLE_EMAIL_2=
+
+# AI
+OPENAI_API_KEY=
+OPENAI_MODEL=gpt-4o-mini
+
+# qBittorrent
+QBITTORRENT_HOST=
+QBITTORRENT_PORT=8080
+QBITTORRENT_USERNAME=admin
+QBITTORRENT_PASSWORD=
+
+# Internal service API keys (auto-generated)
+INVENTORY_SERVICE_API_KEY=
+BUDGET_SERVICE_API_KEY=
+
+# Actual Budget
+ACTUAL_PASSWORD=
+BUDGET_SYNC_ID=
+
+# NocoDB
+NOCODB_URL=
+NOCODB_PUBLIC_URL=