Merge pull request #194 from Fury03/feat/172-secure-document-upload

feat: secure document upload for educator KYC (government ID, certificate)

Author: zeemscript

.env.example

@@ -23,7 +23,12 @@ NEXT_PUBLIC_DONATION_WALLET=
 
 # ─── Cloudinary ────────────────────────────────────
 NEXT_PUBLIC_CLOUDINARY_CLOUD_NAME=your_cloudinary_cloud_name
-# Cloudinary cloud name for unsigned uploads (required)
+# Cloudinary cloud name for unsigned uploads (required).
+# Unsigned uploads return a PUBLIC secure_url, so this path is for course
+# media only — thumbnails, previews, lesson video.
+# Verification documents (government ID, certificates) must NEVER go through
+# it. They upload to a private, short-lived signed URL issued by the backend;
+# see lib/actions/educators/uploadDocument.js.
 
 # ─── Jitsi ─────────────────────────────────────────
 NEXT_PUBLIC_JITSI_DOMAIN=https://meet.jit.si