env-audit

Cross-check .env.example against real code usage: every required var is read somewhere, nothing secret hides behind NEXT_PUBLIC_, and no secrets are hardcoded in src/. Use whenever the user mentions env vars, .env, secrets, config, API keys, "did I set everything", missing environment variables, or deploy configuration.