Security Notes Environment Variables Never commit: .env API keys Database passwords Required variables: PORT MONGO_URI JWT_SECRET REDIS_URL OPENAI_API_KEY