chore: codebase cleanup — remove dead code, fix bugs, improve docs

- Delete 5 unused Vue components (ErrorState, LandingHeader, LandingFooter, DiagnosticBadge, LiveTerminal)
- Remove unused @tailwindplus/elements dependency
- Remove commented-out Seline analytics token from nuxt.config
- Remove commented-out code blocks in default.vue and ask.vue
- Fix undefined print_error in scripts/stop.sh
- Replace real-looking DB creds with placeholders in .env.example
- Add missing env vars to .env.example (DATABASE_URL_MIGRATE, WEB_URL, LINK_BASE_URL, ADMIN_EMAIL)
- Move recipe docs from scripts/ to docs/recipes/
- Delete duplicate Kubernetes recipe (full version already in docs/)
- Update references in USE_CASES.md and exe-dev-private-access.md

Author: dantelex

USE_CASES.md

@@ -279,7 +279,7 @@ connect reach k8s-api --port 6443
 
 Control plane and nodes stay private; Private Connect routes traffic by name. Works with path-based multicluster API servers and distributed worker nodes.
 
-See the [full virtual Kubernetes guide](docs/kubernetes-virtual-clusters-and-private-connect.md) and [recipe](scripts/kubernetes-virtual-clusters-and-private-connect.md).
+See the [full virtual Kubernetes guide](docs/kubernetes-virtual-clusters-and-private-connect.md).
 
 ---
 

apps/api/.env.example

@@ -1,5 +1,8 @@
 # Database connection (port 5433 matches docker-compose when Postgres is mapped to host 5433)
-DATABASE_URL="postgresql://privateconnect:privateconnect@localhost:5433/privateconnect"
+DATABASE_URL="postgresql://user:password@localhost:5433/privateconnect"
+
+# Migration database URL (superuser, bypasses RLS - use only for migrations/db:push)
+DATABASE_URL_MIGRATE="postgresql://user:password@localhost:5433/privateconnect"
 
 # API server port (optional, default: 3001)
 PORT=3001
@@ -20,6 +23,15 @@ EMAIL_FROM="Private Connect <noreply@yourdomain.com>"
 # Public URL for magic links
 APP_URL="https://yourdomain.com"
 
+# Web frontend URL (used for magic links and CORS)
+WEB_URL="http://localhost:3000"
+
+# Base URL for public share/grant links
+LINK_BASE_URL="https://yourdomain.com"
+
+# Admin email(s) — comma-separated for multiple admins
+ADMIN_EMAIL=
+
 # ============================================
 # Field-level encryption key (required for AI API key storage)
 # Generate with: node -e "console.log(require('crypto').randomBytes(32).toString('hex'))"