Startup should log all missing/invalid env vars and exit cleanly. **Acceptance criteria** - [ ] List missing vars in a single error message. - [ ] Process exits with non‑zero code.