[Prod Gaps] Group H — Docs & Hygiene

[v-patel]

Group H — Docs & Hygiene

Why this matters

• H.1 + H.2: README is wrong. New devs follow it, hit broken setup, lose hours.
• H.3: no production deploy docs.
• H.4: API filenames are inconsistent (Change api file names #247).
• H.5: dev.db is recoverable from git history.
• H.6: rotate the local dev secret.

Sub-issues

(Linked below.)