improved a lot of things

.env.example

@@ -8,21 +8,24 @@ SUPABASE_SERVICE_ROLE_KEY=
 ANTHROPIC_API_KEY=
 
 # Clerk — https://dashboard.clerk.com
-CLERK_PUBLISHABLE_KEY=
+# NOTE: the publishable key MUST use the NEXT_PUBLIC_ prefix so Clerk initialises
+# on the client side. The secret key is server-only and must NOT have the prefix.
+NEXT_PUBLIC_CLERK_PUBLISHABLE_KEY=
 CLERK_SECRET_KEY=
 
+# Agent Bridge — used to sign/verify workspace tokens for IDE integrations (Cursor, Claude Code).
+# Generate with: openssl rand -hex 32
+AGENT_BRIDGE_SECRET=
+
 # Liveblocks (Phase 3) — https://liveblocks.io/dashboard
 LIVEBLOCKS_SECRET_KEY=
 
-# Linear integration
+# Webhook secrets — set these in each integration's dashboard
 LINEAR_WEBHOOK_SECRET=
-
-# Slack integration
 SLACK_BOT_TOKEN=
 SLACK_SIGNING_SECRET=
-
-# Agent Bridge WebSocket server port
-AGENT_BRIDGE_PORT=3001
+GITHUB_WEBHOOK_SECRET=
+INTERCOM_WEBHOOK_SECRET=
 
 # App base URL
 NEXT_PUBLIC_APP_URL=http://localhost:3000