chore: Update sensitive information in documentation and code to use environment variables

This commit replaces hardcoded sensitive information, such as database passwords and secret keys, in the README and deployment documentation with placeholders and instructions to use environment variables. This change enhances security by preventing exposure of sensitive data in the codebase. Additionally, it updates the database session management to raise an error if the DATABASE_URL environment variable is not set, ensuring proper configuration for development environments.

.gitea/workflows/ci.yml

@@ -2,22 +2,25 @@
 name: CI
 
 on:
-  # Only trigger on push for protected branches (master, dev)
-  # Feature branches should use pull_request events only to avoid duplicates
+  # Trigger on push for protected branches (master, dev) - direct pushes only
+  # Trigger on pull_request for all branches - PRs to master/dev and feature branches
+  # This separation prevents duplicate runs: pushes to master/dev don't conflict with PRs
   push:
     branches: [master, dev]
   pull_request:
     types: [opened, synchronize, reopened]
-    branches: [master, dev]
+    # PRs can target any branch, but we only test PRs targeting master/dev
+    # Feature branch PRs will also trigger, but they won't conflict with push events
 
 # Prevent duplicate runs when pushing to a branch with an open PR
-# This ensures only one workflow runs at a time for the same branch/PR
+# This ensures only one workflow runs at a time for the same commit
 concurrency:
   # Use commit SHA to unify push and PR events for the same commit
   # This prevents duplicate runs when both push and PR events fire for the same commit
-  # For PRs: uses head SHA (the commit being tested)
+  # For PRs: uses head SHA (the commit being tested) 
   # For pushes: uses the commit SHA from the push event (github.event.after or github.sha)
-  #test
+  # The group name combines workflow name with commit SHA to ensure uniqueness
+  # If both push and PR events fire for the same commit, only one will run
   group: ${{ github.workflow }}-${{ github.event.pull_request.head.sha || github.event.after || github.sha }}
   cancel-in-progress: true