Fix build reliability and harden admin integrations

.env.example

@@ -0,0 +1,15 @@
+NEXT_PUBLIC_SUPABASE_URL=
+NEXT_PUBLIC_SUPABASE_ANON_KEY=
+SUPABASE_SERVICE_ROLE_KEY=
+
+# Server-only integrations. Never prefix these with NEXT_PUBLIC_.
+ADMIN_EMAIL=admin@example.com
+GITHUB_TOKEN=
+DISCORD_WEBHOOK_URL=
+
+# Optional contact-form email delivery.
+SMTP_HOST=
+SMTP_PORT=587
+SMTP_SECURE=false
+SMTP_USER=
+SMTP_PASSWORD=

.eslintrc.json

@@ -0,0 +1,3 @@
+{
+  "extends": ["next/core-web-vitals"]
+}

.gitignore

@@ -22,7 +22,7 @@
 # misc
 .DS_Store
 *.pem
-package-lock.json
+*.tsbuildinfo
 
 # debug
 npm-debug.log*

README.md

@@ -218,8 +218,16 @@ Add these to your Vercel project settings:
 ```
 NEXT_PUBLIC_SUPABASE_URL
 NEXT_PUBLIC_SUPABASE_ANON_KEY
+SUPABASE_SERVICE_ROLE_KEY
+ADMIN_EMAIL
+GITHUB_TOKEN
+DISCORD_WEBHOOK_URL
 ```
 
+Keep the service-role key, GitHub token, and Discord webhook server-only. Copy
+`.env.example` to `.env.local` for local development and set the same values in
+Vercel for production.
+
 ### Custom Domain Setup (is-a.dev)
 
 *The custom domain sahad.is-a.dev was registered via the **is-a.dev** service:*

next-env.d.ts

@@ -0,0 +1,6 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
+/// <reference path="./.next/types/routes.d.ts" />
+
+// NOTE: This file should not be edited
+// see https://nextjs.org/docs/app/api-reference/config/typescript for more information.

next.config.js

@@ -8,14 +8,6 @@ const nextConfig = {
       },
     ],
   },
-  // Suppress ESLint errors during build (warnings only)
-  eslint: {
-    ignoreDuringBuilds: true,
-  },
-  // Suppress TypeScript errors during build
-  typescript: {
-    ignoreBuildErrors: true,
-  },
 };
 
 module.exports = nextConfig;