CedarCopilot/cedar-mail

# Env Cleanup Plan

## Goal

Keep local `.env` usage focused on local development while deployed secrets live in AWS Secrets Manager.

## Process

1. Build an env usage inventory.
2. Group keys by owner:
   - frontend
   - server runtime
   - scripts/local tooling
   - AWS runtime
3. Split keys into:
   - local dev only
   - shared runtime secrets
   - AWS-only
   - candidate unused
4. Keep the live root `.env` ignored.
5. Keep the tracked `.env.example` focused on local development.

## Output

- minimal local `.env`
- minimal local `.env.example`
- documented secret inventory without values
- explicit AWS secret references