fix(P1): .env.example with 15min access token, ENCRYPTION_KEY required note, REDIS_PASSWORD

fix(P0): Document ENCRYPTION_KEY in .env.example, add key_last4/prefix to model and settings route

fix: .env.example with consistent port (5432) and honest comments

fix: Default Postgres host port to 55432 to avoid local conflicts

Upload .env.example