Rejected default fallbacks for environment variables and secrets; now enforce strict start‑up validation that fails fast with a redacted error when required values like MONGODB_URI are missing.
I added a validator that checks required env vars and the environment name, committed a .env.example with placeholders, and removed any code paths that default to production URIs or secrets.