secert updated

.env.example

@@ -121,15 +121,26 @@ EMBEDDING_DIMENSIONS=0
 # Google Geocoding when set; OpenStreetMap's Nominatim otherwise.
 GEOCODER_API_KEY=
 
-# Nearle Buddy. Any OpenAI-compatible endpoint; empty provider disables the
-# assistant entirely and the console's composer stays disabled.
-#   Groq:   https://api.groq.com/openai/v1   openai/gpt-oss-120b
-#   Ollama: http://localhost:11434/v1        (no key needed)
+# ── Nearle Buddy ────────────────────────────────────────────────────────────
+#
+# ONE variable. The provider, endpoint and model are defaults in config.go
+# (openai / api.groq.com / openai/gpt-oss-120b) because each has one right
+# answer for this product — and three variables that must be typed correctly
+# into a hosting platform are three ways for the assistant to sit silently off,
+# which is how it spent its first week.
+#
+# The key is the only one that differs per deployment and the only one that
+# cannot live in this repository. Locally it goes in `.env.secrets`, which git
+# ignores; in production it is set on the platform.
+ASSISTANT_API_KEY=
+
+# Overrides, none of them needed for the shipped setup.
+#   Ollama on a laptop: ASSISTANT_BASE_URL=http://localhost:11434/v1 and
+#   ASSISTANT_MODEL=llama3 — a local endpoint needs no key.
 ASSISTANT_PROVIDER=
 ASSISTANT_BASE_URL=
-ASSISTANT_API_KEY=
 ASSISTANT_MODEL=
-# Optional per-tier overrides. ASSISTANT_MODEL alone sets all three.
+# Per-tier overrides. ASSISTANT_MODEL alone sets all three.
 ASSISTANT_MODEL_FAST=
 ASSISTANT_MODEL_BALANCED=
 ASSISTANT_MODEL_DEEP=