fix: remove %(ENV_...)s from supervisord — inherit env from start.sh instead

hf/supervisord.conf

@@ -16,8 +16,10 @@ startsecs=5
 stdout_logfile=/var/log/supervisor/fastapi.log
 stderr_logfile=/var/log/supervisor/fastapi.log
 stdout_logfile_maxbytes=5MB
-; Pass all env vars from the parent shell (set by start.sh / HF Spaces secrets)
-environment=PYTHONUNBUFFERED="1",PYTHONPATH="/app/backend",GROQ_API_KEY="%(ENV_GROQ_API_KEY)s",OPENAI_API_KEY="%(ENV_OPENAI_API_KEY)s",DATABASE_URL="%(ENV_DATABASE_URL)s",USE_SQLITE="%(ENV_USE_SQLITE)s",JWT_SECRET_KEY="%(ENV_JWT_SECRET_KEY)s",BACKEND_CORS_ORIGINS="%(ENV_BACKEND_CORS_ORIGINS)s",REDIS_URL="%(ENV_REDIS_URL)s"
+; start.sh exports all secrets before exec'ing supervisord, so the child
+; process inherits the full parent environment. We only need to set the two
+; vars that are NOT already in the shell environment.
+environment=PYTHONUNBUFFERED="1",PYTHONPATH="/app/backend"
 
 [program:nextjs]
 command=node server.js