PORT=8080 FRONTEND_URL=http://localhost:5173 GOOGLE_CLIENT_ID=replace-me GOOGLE_CLIENT_SECRET=store-only-in-secret-manager SESSION_SECRET=generate-a-long-random-secret ALLOWED_EMAILS=your-email@example.com MCP_GATEWAY_URL=https://your-controlled-gateway.example