First commit of claude's rework in django + vanillajs fronted

.env.example

@@ -1,20 +1,12 @@
-# Copy this file to .env and fill in real values.
-# .env is gitignored — never commit secrets.
+SECRET_KEY=change-me-in-production
+DEBUG=True
+ALLOWED_HOSTS=localhost,127.0.0.1,web
 
-SECRET_KEY=change-me-to-a-long-random-string
+DATABASE_URL=postgresql://shooter:shooter_secret@db:5432/shooter_hub
 
-DB_PASSWORD=change-me-db-password
-
-# Google OAuth — https://console.developers.google.com/
+# External IDP credentials (configure in Django admin or here)
 GOOGLE_CLIENT_ID=
 GOOGLE_CLIENT_SECRET=
 
-# GitHub OAuth — https://github.com/settings/developers
-GITHUB_CLIENT_ID=
-GITHUB_CLIENT_SECRET=
-
-# Email confirmation for local accounts.
-# Set to "true" to require users to click a confirmation link before logging in.
-# When "false" (default), accounts are activated immediately.
-# The confirmation URL is always printed to Docker logs regardless of this setting.
-EMAIL_CONFIRMATION_REQUIRED=false
+APPLE_CLIENT_ID=
+APPLE_CLIENT_SECRET=