Third-party review cp .env.example .env (set any JWT_SECRET) npm ci (or npm install) npx prisma db push npm test make smoke Optional: npm run dev and hit health/auth routes Expect No production secrets in repo SQLite file created locally (gitignored) MIT license