docs: update README with current progress and quick start

- Add ./dev.sh one-command startup
- Update MVP status: 14/34 complete (41.2%)
- Link to DEV_SETUP.md for detailed guide
- Show Week 1-2 complete, Week 3 in progress

.env.example

@@ -1,54 +1,20 @@
-# Pantry - Environment Variables Template
-# Copy to .env.development for local development
-# Copy to .env.production for production deployment
+# Supabase Local Development Environment
+# Copy this file to .env and adjust as needed
 
-# ==============================================
-# Supabase Configuration
-# ==============================================
+# PostgreSQL
+POSTGRES_PASSWORD=postgres
 
-# Supabase API URL (from Coolify service)
-SUPABASE_URL=https://your-supabase-instance.example.com
+# JWT Secret (generate with: openssl rand -base64 32)
+# Default is fine for local dev, change for production
+JWT_SECRET=super-secret-jwt-token-with-at-least-32-characters-long
 
-# Supabase Anon Key (public, safe to expose to frontend)
-SUPABASE_ANON_KEY=your-anon-key-here
+# API Keys
+# These are Supabase's default demo keys - OK for local development
+# For production, generate new keys: https://supabase.com/docs/guides/self-hosting#api-keys
+ANON_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6ImFub24iLCJleHAiOjE5ODM4MTI5OTZ9.CRXP1A7WOeoJeXxjNni43kdQwgnWNReilDMblYTn_I0
 
-# Supabase Service Role Key (SECRET - server-side only, never expose to frontend)
-SUPABASE_SERVICE_ROLE_KEY=your-service-role-key-here
+SERVICE_ROLE_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6InNlcnZpY2Vfcm9sZSIsImV4cCI6MTk4MzgxMjk5Nn0.EGIM96RAZx35lJzdJsyH-qQwv8Hdp7fsn3W0YpN81IU
 
-# JWT Secret (for Supabase Auth)
-SUPABASE_JWT_SECRET=your-jwt-secret-here
-
-# Database Password (for direct PostgreSQL access if needed)
-POSTGRES_PASSWORD=your-postgres-password-here
-
-# ==============================================
-# Application Configuration
-# ==============================================
-
-# Public app URL (where the Nuxt app is hosted)
-PUBLIC_APP_URL=http://localhost:3000
-
-# Node environment
-NODE_ENV=development
-
-# ==============================================
-# External APIs
-# ==============================================
-
-# Open Food Facts API (no auth required)
-OPENFOODFACTS_API_URL=https://world.openfoodfacts.org
-
-# ==============================================
-# Optional: Auth Providers (OIDC)
-# ==============================================
-
-# Google OAuth (optional - configure in Supabase if needed)
-AUTH_GOOGLE_ENABLED=false
-AUTH_GOOGLE_CLIENT_ID=
-AUTH_GOOGLE_SECRET=
-
-# Authentik (optional)
-AUTH_AUTHENTIK_ENABLED=false
-AUTH_AUTHENTIK_URL=
-AUTH_AUTHENTIK_CLIENT_ID=
-AUTH_AUTHENTIK_SECRET=
+# Nuxt App Configuration (also copy to app/.env)
+NUXT_PUBLIC_SUPABASE_URL=http://localhost:54321
+NUXT_PUBLIC_SUPABASE_ANON_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZS1kZW1vIiwicm9sZSI6ImFub24iLCJleHAiOjE5ODM4MTI5OTZ9.CRXP1A7WOeoJeXxjNni43kdQwgnWNReilDMblYTn_I0