Set these in the deployment environment, then redeploy or restart.

• BRIGHTDATA_API_TOKENRequired by SCRAPE_TARGETS provider "brightdata".
• GOOGLE_CLIENT_IDGoogle OAuth client ID for cloud social sign-in.
• GOOGLE_CLIENT_SECRETGoogle OAuth client secret.
• OPENAI_API_KEY or OPENROUTER_API_KEY or ANTHROPIC_API_KEY or MISTRAL_API_KEY or TOGETHER_API_KEYNeeded for brand onboarding and the Opportunities report. Alternatively, set ONBOARDING_LLM_TARGET and that provider's keys.
• RESEND_API_KEYResend API key for transactional email.
• RESEND_FROM_EMAILSender address for transactional email, in the form: Aeonav <notifications@updates.example.com>. The domain must be verified in Resend.
• WAFFO_MERCHANT_IDWaffo merchant id, used to create authenticated checkout sessions.
• WAFFO_PRIVATE_KEYWaffo merchant private key; never exposed to the browser.
• WAFFO_PRODUCT_IDSJSON object mapping `plan:interval` to a Waffo product id, e.g. {"starter:month":"PROD_x","starter:year":"PROD_y"}.
• WAFFO_STORE_IDWaffo store id. Webhooks from any other store are rejected.