rust fmt, updated ci, hooks and docs

.env.example

@@ -2,40 +2,22 @@
 # Your primary domain (e.g., example.com). Used to derive ALLOWED_HOSTS, CORS, and CSRF settings.
 DOMAIN="localhost"
 
-# Set to a long, random string in production (e.g. 50+ chars). REQUIRED in prod.
-SECRET_KEY="django-insecure-replace-this-in-production"
+# Signs the SimpleJWT-compatible tokens. Set to a long, random string in
+# production. Keep it CONSTANT across deploys/restarts or all tokens invalidate.
+SECRET_KEY="replace-this-in-production"
 
-# Which settings module to load. Use holy_backend.settings.dev locally,
-# holy_backend.settings.prod in production (Docker compose sets this).
-DJANGO_SETTINGS_MODULE=holy_backend.settings.dev
+# --- Background jobs (Rust in-process scheduler) ---
+# Lets the backend own api_job scheduling. EXACTLY ONE running instance may set
+# this true, or scheduled jobs fire twice against the shared DB.
+RUST_ENABLE_SCHEDULER=true
 
-# Set to "false" in production for security and performance
-DEBUG=true
+# Set `Secure` on auth cookies (true in production).
+JWT_AUTH_COOKIE_SECURE=true
 
-# Custom URL for the Django Admin interface (e.g., my-secret-admin/)
-ADMIN_URL="admin"
-
-# --- Celery / Redis ---
-# Broker and result backend for background jobs. Docker compose defaults to the bundled redis service.
-# DB 0 is used by Celery; DB 1 is used by Django cache (see DJANGO_CACHE_URL below).
-CELERY_BROKER_URL=redis://redis:6379/0
-CELERY_RESULT_BACKEND=redis://redis:6379/0
-# Run tasks synchronously (useful for local dev or CI). Unset in production.
-# CELERY_TASK_ALWAYS_EAGER=true
-
-# Django cache backend URL. Shares the redis instance on a different DB number.
-DJANGO_CACHE_URL=redis://redis:6379/1
-
-# Flower (Celery monitoring UI) — exposed on :5555. Format: "user:password".
-# CHANGE BEFORE DEPLOY.
-FLOWER_BASIC_AUTH=admin:change-me
-
-# Worker/beat containers set this in docker-compose.yml; do not set globally.
-# SKIP_INIT=true
+# tracing/log filter for the Rust backend.
+# RUST_LOG=info,holy_backend_rs=info,sea_orm=warn
 
 # --- Advanced Networking (Optional, derived from DOMAIN if unset) ---
-# ALLOWED_HOSTS=example.com,another-domain.com
-# CSRF_TRUSTED_ORIGINS=https://example.com
 # CORS_ALLOWED_ORIGINS=https://example.com
 # FRONTEND_URL=https://example.com
 # VITE_API_URL=https://example.com/api/