add production readiness and recovery assets

.env.example

@@ -1,12 +1,17 @@
-# Local, non-secret runtime configuration. Copy to .env; never commit real credentials.
-APP_ENV=development
+# Portable deployment example. Keep this file secret-free; supply SESSION_SECRET via a secret manager.
+APP_ENV=production
 LOG_LEVEL=INFO
 API_PORT=8000
 WEB_PORT=8080
-CORS_ORIGINS=http://localhost:8080
-# Optional first-run admin bootstrap. Set both only for a fresh deployment;
-# remove them after the admin account has been created. Never commit credentials.
+CORS_ORIGINS=https://your-approved-web-origin.example
+DATA_DIR=/data
+# Required in production; generate at least 32 random characters outside this file.
+SESSION_SECRET=
+# Optional first-run admin bootstrap. Remove both immediately after provisioning.
 BOOTSTRAP_ADMIN_EMAIL=
 BOOTSTRAP_ADMIN_PASSWORD=
-# Deliberately fixed to false in compose for this MVP.
+# Hard safety default; this release has no delivery capability.
 AUTOMATED_OUTREACH_ENABLED=false
+# Backup operations (host-side, never mounted into the web container).
+BACKUP_DIR=/var/backups/prospect-platform
+BACKUP_RETENTION=30