Add .env.example with recommended env vars (OAuth, session, Redis, feature flags)\n\nDo NOT commit real secrets; use GitHub Secrets or a vault.

Author: Admin

.env.example

@@ -0,0 +1,19 @@
+# Example environment variables (DO NOT store real secrets in repo)
+# OAuth (Google)
+GOOGLE_CLIENT_ID=your-google-client-id
+GOOGLE_CLIENT_SECRET=your-google-client-secret
+
+# OAuth (GitHub)
+GITHUB_CLIENT_ID=your-github-client-id
+GITHUB_CLIENT_SECRET=your-github-client-secret
+
+# Session secret
+SESSION_SECRET=super-secret-session-key
+
+# Redis
+REDIS_URL=redis://localhost:6379
+
+# Feature flags
+COPILOT_PLAN_FALLBACK=0
+
+# Notes: keep real values in environment or secret manager (GitHub Secrets, Vault, etc.)