Ship Novya PWA with backend for deployable production use.

Fix production TypeScript builds and add DEPLOY.md so the app can be hosted from this repo.

Co-authored-by: Cursor <cursoragent@cursor.com>

backend/.env.example

@@ -0,0 +1,31 @@
+# Application
+NODE_ENV=development
+PORT=3001
+HOST=0.0.0.0
+API_VERSION=1.0.0
+BUILD_TIMESTAMP=
+
+# Database (separate MySQL instance — not Supabase)
+DATABASE_URL=mysql://novya:novya@127.0.0.1:3306/novya
+
+# Logging
+LOG_LEVEL=info
+
+# Security
+CORS_ORIGIN=http://localhost:5173
+TRUST_PROXY=false
+
+# Rate limiting (in-memory; not production-grade)
+RATE_LIMIT_WINDOW_MS=60000
+RATE_LIMIT_MAX=100
+AUTH_RATE_LIMIT_MAX=20
+
+# Auth sessions (opaque token; 168 hours = 7 days). Refresh tokens are not implemented.
+AUTH_SESSION_TTL_HOURS=168
+
+# AI runtime (backend-only — never VITE_*)
+OPENAI_API_KEY=
+OPENAI_BASE_URL=https://api.gapgpt.app/v1
+OPENAI_MODEL=gpt-4o-mini
+OPENAI_ORG_ID=
+OPENAI_PROJECT_ID=