blefnk/relivator

I ran a production-readiness audit on my project and found the following issues. Please fix all of them: 1. I have a hardcoded Hardcoded fallback secret in src/lib/auth.ts at line 100. Please move this to an environment variable. Create a .env.example file documenting the required variable (without the actual value), update .gitignore to exclude .env files, and replace the hardcoded value with process.env.VARIABLE_NAME. Add a startup check that exits with a clear error if the required env var is missing. Affected: src/lib/auth.ts:100, src/api/payments/service.ts:8. 2. I have a sensitive route in undefined that appears to lack authentication/authorization middleware. Please add authentication middleware to protect this route. Verify that only authorized users can access it. 3. My React/Next.js app is missing error boundaries. Please create an error.tsx file in the app/ directory to catch rendering errors. This prevents the entire app from crashing when a component throws an error, and shows a user-friendly fallback UI instead. 4. My Next.js app is missing a root error page. Please create a root error.tsx in the app/ directory that catches unhandled errors and shows a user-friendly error page with a retry option. 5. My project has no CI/CD configuration. Please create a GitHub Actions workflow (.github/workflows/ci.yml) that runs on push and pull requests. It should: 1) Install dependencies, 2) Run linting, 3) Run type checking, 4) Run tests, 5) Build the project. This ensures every change is automatically validated. 6. My API has no rate limiting configured. Please add rate limiting middleware (express-rate-limit or similar) to protect against abuse. Set reasonable limits for different endpoint types: stricter limits for auth endpoints (5-10 req/min), moderate for API endpoints (100 req/min), and standard for general requests. 7. My project has no input validation library. Please install zod and add schema validation for all API endpoints and form inputs. Define schemas for request bodies, query parameters, and path parameters. Return clear validation error messages so clients know exactly what to fix. 8. My .gitignore is missing important entries. Please update .gitignore to exclude: node_modules/, .env, .env.*, dist/, build/, coverage/, .DS_Store, and any IDE-specific files.