Milestones 0 and 1: foundation and money in (20261007.10)

Foundation: single arm64 container (Hono + SQLite via Drizzle, React + Vite),
local sign-in with long-lived sessions and passkeys, roles (read-only, full
access, admin), nightly and pre-upgrade backups, light and dark themes,
date-based version numbers, and the ideas lightbulb behind IDEAS_ENABLED.

Money in: accounts with balances, CSV import with bank detection, a column
mapping pop-up for unknown layouts, duplicate checks, transfer pairing and
undo; one-tap review with learned rules; activity with search, splits, tags,
notes and cash entries. Statement files are blocked from commits by a
pre-commit hook; tests use synthetic fixtures only.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.env.example

@@ -0,0 +1,28 @@
+# Spendlight settings. Copy this file to .env and adjust.
+
+# The address people use to open Spendlight, through your HTTPS proxy.
+# Needed for Face ID / fingerprint sign-in. Example: https://spendlight.example.com
+PUBLIC_URL=
+
+# Port on this server that the proxy forwards to.
+HOST_PORT=8095
+
+# Household time zone: used for "today", nightly backups and version stamps.
+TZ=America/New_York
+
+# The ideas box (lightbulb at the top right). Handy while building; set to
+# false to hide it completely.
+IDEAS_ENABLED=true
+
+# Where the database and the backups live on this server.
+DATA_PATH=./data
+BACKUP_PATH=./backups
+
+# Nightly backup time (24-hour clock) and how many copies to keep.
+BACKUP_TIME=02:30
+BACKUP_KEEP_DAILY=14
+BACKUP_KEEP_MONTHLY=12
+
+# The user and group the app runs as, matching the owner of the folders above.
+PUID=1000
+PGID=1000