chore: sync all local changes and new files

- Update next.config.ts
- Add netlify.toml, Docker configs, e2e tests
- Add env templates, docs (README, ROADMAP, TODO)
- Add vitest/playwright test configs
- Add component and lib tests
- Add install script, portainer env template
- Update .gitignore (tsbuildinfo, deno.lock, dev.db)

.env.example

@@ -0,0 +1,111 @@
+# Falah OS v1.3 — Environment Variables
+# Copy to .env and fill in all values before running.
+# Generate secrets with: openssl rand -base64 32
+
+# =============================================================================
+# REQUIRED — must be set before starting
+# =============================================================================
+
+# JWT signing secret — min 32 random characters
+JWT_SECRET=
+
+# Encryption key for sensitive data — min 32 random characters
+ENCRYPTION_KEY=
+
+# Admin secret for privileged operations
+ADMIN_SECRET=
+
+# PostgreSQL password
+POSTGRES_PASSWORD=
+
+# Redis password
+REDIS_PASSWORD=
+
+# iBaaS API Key for EE Gateway
+IBAAS_API_KEY=falah-os-ibaas-key-2026
+
+# =============================================================================
+# POLAR — required for subscription payments (polar.sh)
+# =============================================================================
+
+# Get from polar.sh > Settings > Developers > Access Tokens
+POLAR_ACCESS_TOKEN=
+
+# Get from polar.sh > Settings > Webhooks > your endpoint secret
+POLAR_WEBHOOK_SECRET=
+
+# App URL for Polar redirect URLs
+NEXT_PUBLIC_APP_URL=http://localhost:3000
+
+# =============================================================================
+# AI — required for Nur AI coaching
+# =============================================================================
+
+OPENCORE_URL=https://opencode.ai/zen/go/v1/chat/completions
+OPENCORE_API_KEY=
+
+# =============================================================================
+# OPTIONAL — have sensible defaults
+# =============================================================================
+
+NODE_ENV=production
+
+# Domain name and protocol for URL generation
+DOMAIN=
+PROTOCOL=https
+
+# Protocol fee taken by Falah OS (default 1.5%)
+PROTOCOL_FEE_PERCENT=1.5
+
+# Shariah rules enforced by RAMZ (comma-separated, no spaces)
+SHARIAH_RULES=NO_RIBA,NO_GHARAR,NO_MAYSIR,HALAL_COMMODITY,ASSET_BACKED,MUTUAL_CONSENT,NO_BAI_INAH
+
+# Set to true only in a controlled test environment
+ENABLE_CHAOS_TESTING=false
+
+# =============================================================================
+# LOGGING (optional)
+# =============================================================================
+
+LOG_LEVEL=info
+LOG_FORMAT=json
+
+# =============================================================================
+# POSTGRES (optional overrides)
+# =============================================================================
+
+POSTGRES_USER=postgres
+POSTGRES_HOST=postgres
+POSTGRES_PORT=5432
+# Derived from the above; override per-service database name as needed
+DATABASE_URL=postgresql://postgres:${POSTGRES_PASSWORD}@postgres:5432/falahdb
+
+# =============================================================================
+# REDIS (optional overrides)
+# =============================================================================
+
+REDIS_HOST=redis
+REDIS_PORT=6379
+
+# =============================================================================
+# FEATURE FLAGS (optional)
+# =============================================================================
+
+ENABLE_MOCKNET=false
+ENABLE_DEBUG=false
+
+# =============================================================================
+# MONITORING (optional)
+# =============================================================================
+
+GRAFANA_PASSWORD=
+ALERT_EMAIL=
+SLACK_WEBHOOK_URL=
+
+# =============================================================================
+# BACKUP (optional)
+# =============================================================================
+
+BACKUP_DIR=/backups
+S3_BUCKET=
+RETENTION_DAYS=30