docs: update README with current progress and quick start

- Add ./dev.sh one-command startup
- Update MVP status: 14/34 complete (41.2%)
- Link to DEV_SETUP.md for detailed guide
- Show Week 1-2 complete, Week 3 in progress

.env.example.bak

@@ -0,0 +1,54 @@
+# Pantry - Environment Variables Template
+# Copy to .env.development for local development
+# Copy to .env.production for production deployment
+
+# ==============================================
+# Supabase Configuration
+# ==============================================
+
+# Supabase API URL (from Coolify service)
+SUPABASE_URL=https://your-supabase-instance.example.com
+
+# Supabase Anon Key (public, safe to expose to frontend)
+SUPABASE_ANON_KEY=your-anon-key-here
+
+# Supabase Service Role Key (SECRET - server-side only, never expose to frontend)
+SUPABASE_SERVICE_ROLE_KEY=your-service-role-key-here
+
+# JWT Secret (for Supabase Auth)
+SUPABASE_JWT_SECRET=your-jwt-secret-here
+
+# Database Password (for direct PostgreSQL access if needed)
+POSTGRES_PASSWORD=your-postgres-password-here
+
+# ==============================================
+# Application Configuration
+# ==============================================
+
+# Public app URL (where the Nuxt app is hosted)
+PUBLIC_APP_URL=http://localhost:3000
+
+# Node environment
+NODE_ENV=development
+
+# ==============================================
+# External APIs
+# ==============================================
+
+# Open Food Facts API (no auth required)
+OPENFOODFACTS_API_URL=https://world.openfoodfacts.org
+
+# ==============================================
+# Optional: Auth Providers (OIDC)
+# ==============================================
+
+# Google OAuth (optional - configure in Supabase if needed)
+AUTH_GOOGLE_ENABLED=false
+AUTH_GOOGLE_CLIENT_ID=
+AUTH_GOOGLE_SECRET=
+
+# Authentik (optional)
+AUTH_AUTHENTIK_ENABLED=false
+AUTH_AUTHENTIK_URL=
+AUTH_AUTHENTIK_CLIENT_ID=
+AUTH_AUTHENTIK_SECRET=