Move hardcoded secrets to environment variables and GitHub Actions secrets

[Copilot]

The repository contained hardcoded API keys and tokens in workflow files and Firebase configuration. This exposes credentials in version control and prevents users from deploying their own instances.

Changes

Environment Variables

• Added .env.example documenting required Firebase configuration variables
• Updated services/firebaseService.ts to read from import.meta.env.VITE_FIREBASE_* with fallback to existing values
• Added .env* patterns to .gitignore

GitHub Actions Secrets

• .github/workflows/netlify-deploy.yml: Replace hardcoded NETLIFY_AUTH_TOKEN and NETLIFY_SITE_ID with ${{ secrets.* }}
• .github/workflows/opencode.yml: Replace hardcoded OPENCODE_API_KEY with ${{ secrets.OPENCODE_API_KEY }}

Documentation

• Updated README.md with environment setup instructions and required GitHub Actions secrets

Usage

Local development:

cp .env.example .env
# Fill in your Firebase credentials
npm run dev

Deployment requires setting these repository secrets:

• NETLIFY_AUTH_TOKEN
• NETLIFY_SITE_ID
• OPENCODE_API_KEY

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Action and Environment variables setup</issue_title>
<issue_description></issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes Action and Environment variables setup #15

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

[github-actions]

🚀 Netlify Deployment

Deploy URL:

Branch: copilot/setup-action-environment-variables
Commit: 4d5673e

[github-actions]

🚀 Netlify Deployment

Deploy URL:

Branch: copilot/setup-action-environment-variables
Commit: 3e02af8