prod-env-var-naming-drift-boots-with-dev-defaults
docker-compose.prod.yml and k8s manifests used env var names the app never reads (RDASH_SESSION_SECRET, DATABASE_URL, REDIS_URL, SMTP_*) while the app reads RDASH_JWT_SECRET and RDASH_-prefixed variants. Production would have silently booted with all dev defaults if not caught in the quality audit. Fix: audit every env var name in compose/k8s against the exact name used in Settings class.