Fix smoke test, complete env example, and clean unused dependencies

.env.example

@@ -1,44 +1,37 @@
-PORT=3001
+# Required - App
 NODE_ENV=development
+PORT=3001
 
-# Database
+# Required - Database
 DATABASE_URL=postgresql://postgres:password@localhost:5432/orbitstream
 
-# JWT
-# REQUIRED in production. Must be a unique, high-entropy value of at least 32
-# characters. The app refuses to start in production if JWT_SECRET is unset, still
-# set to a placeholder ("dev-secret" / "change-me-in-production"), or shorter than
-# 32 characters. Generate one with: openssl rand -base64 48
-JWT_SECRET=change-me-in-production
+# Required - Redis
+REDIS_URL=redis://localhost:6379
+
+# Required - Auth
+JWT_SECRET=change-me-to-a-random-32-char-string-minimum
 JWT_EXPIRES_IN=7d
-# Optional: previous secret used during zero-downtime rotation. Tokens signed with
-# either JWT_SECRET or JWT_SECRET_PREVIOUS are accepted; tokens that only verify
-# against the previous secret are re-issued with the current secret on /auth/refresh
-# (or any login). Remove this once all old tokens have expired.
-JWT_SECRET_PREVIOUS=
 
-# Stellar
-STELLAR_NETWORK=TESTNET
+# Required - Stellar
+STELLAR_NETWORK=testnet
 STELLAR_HORIZON_URL=https://horizon-testnet.stellar.org
-STELLAR_RPC_URL=https://soroban-testnet.stellar.org
 STELLAR_NETWORK_PASSPHRASE=Test SDF Network ; September 2015
 
-# Soroban Contract IDs
+# Required - Platform
+# Your Stellar public key for receiving payments.
+PLATFORM_RECEIVING_ACCOUNT=G...
+FRONTEND_URL=http://localhost:3000
+
+# Optional
+CHECKOUT_SESSION_TTL_MINUTES=30
+CHALLENGE_TTL_SECONDS=300
+CORS_ALLOWED_ORIGINS=http://localhost:3000
+JWT_SECRET_PREVIOUS=
+PLATFORM_DOMAIN=http://localhost:3001
+STELLAR_RPC_URL=https://soroban-testnet.stellar.org
 STREAM_CONTRACT_ID=
 TREASURY_CONTRACT_ID=
-
-# Redis
-REDIS_URL=redis://localhost:6379
-
-# Payment detection
-PLATFORM_RECEIVING_ACCOUNT=
-
-# Webhook delivery queue
 WEBHOOK_POLL_MS=250
 WEBHOOK_MAX_CONCURRENCY=100
-# Set to "true" to disable the in-process webhook worker (e.g. when running a
-# dedicated worker instance).
 WEBHOOK_WORKER_DISABLED=false
-
-# WebSocket
 WS_CORS_ORIGIN=http://localhost:3000

jest-setup.ts

@@ -1,4 +1,4 @@
 process.env.DATABASE_URL = 'postgresql://test:test@localhost:5432/test';
 process.env.REDIS_URL = 'redis://localhost:6379';
-process.env.JWT_SECRET = 'test-secret';
+process.env.JWT_SECRET = 'test-secret-with-at-least-32-characters';
 process.env.PLATFORM_DOMAIN = 'http://localhost:3001';