feat(envs): add dev .env.example and gitignore the filled-in copy

.gitignore

@@ -2,3 +2,4 @@ __pycache__
 .DS_Store
 *.html
 logs
+envs/dev/.env

envs/dev/.env.example

@@ -0,0 +1,39 @@
+# Local development environment variables.
+# Copy this file to repo-root .env and fill in real cm99.net agent credentials
+# only if you want CLI ops (register/set-pin/credit/transfer/monitor-once)
+# to actually call cm99.net. The DB is local-only via docker-compose.override.yml.
+
+# === Runtime ===
+CM_DEBUG=true
+
+# === Deployment Identity ===
+CM_DEPLOY_NAME=dev-cm
+CM_WEB_HOST_PORT=8000
+
+# === Docker Registry / Build ===
+CM_IMAGE_PREFIX=local
+DOCKER_IMAGE_TAG=dev
+
+# === Telegram (unused in A2 — telegram-bot is gated by 'bots' profile) ===
+TELEGRAM_BOT_TOKEN=fill-only-if-running-bots-profile
+TELEGRAM_ALERT_CHAT_ID=
+TELEGRAM_ALERT_BOT_TOKEN=
+
+# === Database (dev mysql in docker; bot_cli.sh overrides DB_HOST=127.0.0.1) ===
+DB_HOST=mysql
+DB_USER=cm
+DB_PASSWORD=devpassword
+DB_NAME=cm
+DB_PORT=3306
+DB_CONNECTION_TIMEOUT=8
+DB_CONNECT_RETRIES=5
+DB_CONNECT_RETRY_DELAY=2
+MYSQL_ROOT_PASSWORD=devroot
+
+# === Bot Config ===
+# CM_PREFIX_PATTERN=13c MUST match the seed in docker/mysql/init.d/02-seed.sql.
+CM_PREFIX_PATTERN=13c
+CM_AGENT_ID=fill-with-real-agent-id-to-test-cm99-calls
+CM_AGENT_PASSWORD=fill-with-real-agent-password-to-test-cm99-calls
+CM_SECURITY_PIN=000000
+CM_BOT_BASE_URL=https://cm99.net