chore: remove dead Supabase keys and leaked API keys from env config

SECURITY: Remove live API keys that were committed to .env.development:
- Worldream OpenAI key (sk-proj-...)
- Worldream Gemini key
- Worldream Replicate token
- Worldream Supabase anon key (live JWT)

These keys should be rotated immediately.

Also removes dead Supabase config for:
- Maerchenzauber (archived)
- Memoro (archived)
- ManaDeck (migrated to PostgreSQL + Drizzle)
- ManaCore (will be migrated to mana-core-auth)

Cleans up generate-env.mjs to remove Memoro entries and
Supabase references from ManaDeck and Worldream.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.env.development

@@ -157,11 +157,6 @@ OLLAMA_URL=http://localhost:11434
 MAERCHENZAUBER_BACKEND_PORT=3013
 MAERCHENZAUBER_APP_ID=8d2f5ddb-e251-4b3b-8802-84022a7ac77f
 
-# Supabase
-MAERCHENZAUBER_SUPABASE_URL=https://your-storyteller-project.supabase.co
-MAERCHENZAUBER_SUPABASE_ANON_KEY=your-supabase-anon-key
-MAERCHENZAUBER_JWT_SECRET=your-jwt-secret
-
 # Azure OpenAI for story generation
 MAERCHENZAUBER_AZURE_OPENAI_KEY=YOUR_KEY
 MAERCHENZAUBER_AZURE_OPENAI_ENDPOINT=https://your-endpoint.openai.azure.com/openai/deployments/gpt-4o/chat/completions?api-version=2024-08-01-preview
@@ -169,22 +164,6 @@ MAERCHENZAUBER_AZURE_OPENAI_ENDPOINT=https://your-endpoint.openai.azure.com/open
 # Replicate for image generation
 MAERCHENZAUBER_REPLICATE_API_KEY=YOUR_KEY
 
-# ============================================
-# MEMORO PROJECT
-# ============================================
-
-MEMORO_SUPABASE_URL=https://your-memoro-project.supabase.co
-MEMORO_SUPABASE_ANON_KEY=your-supabase-anon-key
-MEMORO_MIDDLEWARE_API_URL=https://mana-core-middleware-111768794939.europe-west3.run.app
-MEMORO_APPID=your-app-id
-
-# ============================================
-# MANACORE PROJECT
-# ============================================
-
-MANACORE_SUPABASE_URL=https://your-manacore-project.supabase.co
-MANACORE_SUPABASE_ANON_KEY=your-supabase-anon-key
-
 # ============================================
 # MANADECK PROJECT
 # ============================================
@@ -192,8 +171,6 @@ MANACORE_SUPABASE_ANON_KEY=your-supabase-anon-key
 MANADECK_BACKEND_PORT=3009
 MANADECK_DATABASE_URL=postgresql://manacore:devpassword@localhost:5432/manadeck
 MANADECK_APP_ID=cea4bfc6-a4de-4e17-91e2-54275940156e
-MANADECK_SUPABASE_URL=https://your-manadeck-project.supabase.co
-MANADECK_SUPABASE_ANON_KEY=your-supabase-anon-key
 
 # ============================================
 # PICTURE PROJECT
@@ -422,19 +399,9 @@ SKILLTREE_DATABASE_URL=postgresql://manacore:devpassword@localhost:5432/skilltre
 MUKKE_BACKEND_PORT=3010
 MUKKE_DATABASE_URL=postgresql://manacore:devpassword@localhost:5432/mukke
 
-# ============================================
-# WORLDREAM GAME
-# ============================================
-
-WORLDREAM_SUPABASE_URL=https://gbsrekoykkesullxdvbd.supabase.co
-WORLDREAM_SUPABASE_ANON_KEY=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6Imdic3Jla295a2tlc3VsbHhkdmJkIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NTY1MTU3NzksImV4cCI6MjA3MjA5MTc3OX0.qQlZvHiB56oKTRD90fd8IasZeZELjXOA46f-hnOQA1g
-
 # ============================================
 # CITYCORNERS PROJECT
 # ============================================
 CITYCORNERS_BACKEND_PORT=3025
 CITYCORNERS_DATABASE_URL=postgresql://manacore:devpassword@localhost:5432/citycorners
 CITYCORNERS_WEB_PORT=5196
-WORLDREAM_OPENAI_API_KEY=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
-WORLDREAM_GEMINI_API_KEY=AIzaSyB74aUj1KmJlcjNyT5uUiyDODQ6iYoAOjQ
-WORLDREAM_REPLICATE_API_TOKEN=r8_QlvkstNhIc6NBX1ktpQ6ibvzOE2d2UQ1Emamd

scripts/generate-env.mjs

@@ -144,26 +144,6 @@ const APP_CONFIGS = [
 		},
 	},
 
-	// Memoro Mobile
-	{
-		path: 'apps/memoro/apps/mobile/.env',
-		vars: {
-			EXPO_PUBLIC_SUPABASE_URL: (env) => env.MEMORO_SUPABASE_URL,
-			EXPO_PUBLIC_SUPABASE_ANON_KEY: (env) => env.MEMORO_SUPABASE_ANON_KEY,
-			EXPO_PUBLIC_MIDDLEWARE_API_URL: (env) => env.MEMORO_MIDDLEWARE_API_URL,
-			EXPO_PUBLIC_APPID: (env) => env.MEMORO_APPID,
-		},
-	},
-
-	// Memoro Web
-	{
-		path: 'apps/memoro/apps/web/.env',
-		vars: {
-			PUBLIC_SUPABASE_URL: (env) => env.MEMORO_SUPABASE_URL,
-			PUBLIC_SUPABASE_ANON_KEY: (env) => env.MEMORO_SUPABASE_ANON_KEY,
-		},
-	},
-
 	// Manadeck Backend
 	{
 		path: 'apps/manadeck/apps/backend/.env',
@@ -181,8 +161,6 @@ const APP_CONFIGS = [
 	{
 		path: 'apps/manadeck/apps/web/.env',
 		vars: {
-			PUBLIC_SUPABASE_URL: (env) => env.MANADECK_SUPABASE_URL,
-			PUBLIC_SUPABASE_ANON_KEY: (env) => env.MANADECK_SUPABASE_ANON_KEY,
 			PUBLIC_API_URL: (env) => `http://localhost:${env.MANADECK_BACKEND_PORT || '3004'}`,
 			PUBLIC_MANA_CORE_AUTH_URL: (env) => env.MANA_CORE_AUTH_URL,
 			PUBLIC_UMAMI_WEBSITE_ID: (env) => env.UMAMI_WEBSITE_ID_MANADECK || '',
@@ -657,12 +635,7 @@ const APP_CONFIGS = [
 	{
 		path: 'games/worldream/apps/web/.env',
 		vars: {
-			PUBLIC_SUPABASE_URL: (env) => env.WORLDREAM_SUPABASE_URL,
-			PUBLIC_SUPABASE_ANON_KEY: (env) => env.WORLDREAM_SUPABASE_ANON_KEY,
 			PUBLIC_MANA_CORE_AUTH_URL: (env) => env.MANA_CORE_AUTH_URL,
-			OPENAI_API_KEY: (env) => env.WORLDREAM_OPENAI_API_KEY,
-			GEMINI_API_KEY: (env) => env.WORLDREAM_GEMINI_API_KEY,
-			REPLICATE_API_TOKEN: (env) => env.WORLDREAM_REPLICATE_API_TOKEN,
 		},
 	},