feat: complete platform operations roadmap

.env.example

@@ -16,6 +16,10 @@ SUPERADMIN_EMAIL=admin@example.com
 SUPERADMIN_PASSWORD=change-this-password
 AUTH_RATE_LIMIT_MAX=10
 AUTH_RATE_LIMIT_WINDOW_SECONDS=900
+JWT_SESSION_TTL=7d
+INVITATION_TTL_HOURS=168
+PASSWORD_RESET_TTL_HOURS=24
+AUDIT_LOG_PAGE_SIZE=50
 SUPERADMIN_NAME=Compor HUB Superadmin
 
 # Bunny Stream. Set all three in Portainer to enable instructor uploads and
@@ -23,6 +27,9 @@ SUPERADMIN_NAME=Compor HUB Superadmin
 BUNNY_STREAM_LIBRARY_ID=
 BUNNY_STREAM_API_KEY=
 BUNNY_EMBED_TOKEN_KEY=
+# Bunny Read-Only API key. Required only if Bunny webhooks are enabled.
+BUNNY_WEBHOOK_SECRET=
+BUNNY_EMBED_TOKEN_TTL_SECONDS=600
 # Must not exceed the 5 GB Nginx proxy limit declared in docker/nginx.conf.
 BUNNY_MAX_UPLOAD_MB=5120