🦊🔥 FOXFIRE: Env, Auth, and Schema Stabilization

[AdaInTheLab]

🦊🔥 FOXFIRE: Env, Auth, and Schema Stabilization

This PR represents a FOXFIRE convergence commit — foundational systems work that restores invariants across environment loading, authentication bootstrap, and database schema state.

✨ What this PR does

• Deterministic env loading
  • Loads .env + .env.<NODE_ENV> reliably
  • Eliminates silent missing vars in dev/prod
• Session + auth bootstrap stabilization
  • Prevents startup crashes from missing SESSION_SECRET
  • Aligns OAuth enablement with actual runtime env
• Schema meta self-healing
  • Ensures schema_meta exists on fresh DBs
  • Restores a single source of truth for schema versioning
• Startup crash cascade resolved
  • Fixes env → auth → db failure chain
  • App now boots cleanly from a cold start

🧠 Why this matters

This work is not feature-level — it restores structural guarantees:

• The app can always start
• The DB can always self-initialize
• Migrations are versioned, explicit, and idempotent
• Auth behavior is predictable across environments

These invariants are required for everything else to be trustworthy.

🔥 FOXFIRE classification

This qualifies as a FOXFIRE commit because it:

• Removes accumulated bootstrap ambiguity
• Re-aligns multiple subsystems at once
• Converts “it depends” behavior into “it just works”

🧪 Testing notes

• Verified clean boot from empty DB
• Verified repeated boot is idempotent
• Env loading confirmed via .env.development
• Auth routes correctly gated by runtime config

No user-facing behavior changes expected.

---

🦊🔥 Systems stable. Fire contained.