- Create scripts/install.sh that auto-generates Ed25519 signing key,
JWT secret, Postgres and MinIO passwords from .env.example placeholders
- Add startup validation in server to reject placeholder secrets
- Add 401 interceptor in console API client to clear stale JWT tokens
- Update README Quick Start to use ./scripts/install.sh
- Update .env.example with GENERATE_ME placeholders for all secrets
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>