DATABASE_URL="mysql://USER:PASSWORD@HOST:3306/worthpath"
PORT=3100
# Local tunnel testing may use WEB_ORIGIN=*. Production requires an exact origin.
WEB_ORIGIN=http://localhost:5173
COOKIE_SECURE=false