fix: sync backend lockfile and add missing env keys to .env.example and docs

- Regenerate backend/package-lock.json (add 360 missing entries including @aws-sdk/*)
- Add AWS Secrets Manager fallback keys to backend/.env.example (DB_HOST, DB_PORT, DB_USER, DB_PASSWORD, DB_NAME, DB_SECRET_ARN, AWS_DB_SECRET_ID, REDIS_AUTH_TOKEN, REDIS_PASSWORD, REDIS_SECRET_ARN, AWS_REDIS_SECRET_ID, USE_AWS_SECRETS_MANAGER)
- Add price feed alias keys (REFLECTOR_SERVICE_URL, COINGECKO_BASE_URL, REFLECTOR_ADDRESS)
- Sync docs/ENVIRONMENT.md with new env keys

Author: sudo-robi

backend/.env.example

@@ -49,6 +49,24 @@ DB_POOL_SIZE=10
 CI=
 # SQLite database file path for local/test usage | filesystem path | # Optional (default: ./data/portfolio.db)
 DB_PATH=./data/portfolio.db
+# PostgreSQL host (fallback alias for PGHOST) | string | # Optional (default: empty)
+DB_HOST=
+# PostgreSQL port (fallback alias for PGPORT) | integer | # Optional (default: 5432)
+DB_PORT=
+# PostgreSQL username (fallback alias for PGUSER) | string | # Optional (default: empty)
+DB_USER=
+# PostgreSQL password (fallback alias for PGPASSWORD) | string | # Optional (default: empty)
+DB_PASSWORD=
+# PostgreSQL database name (fallback alias for PGDATABASE) | string | # Optional (default: empty)
+DB_NAME=
+# AWS Secrets Manager ARN for database credentials | string | # Optional (default: empty)
+DB_SECRET_ARN=
+# AWS Secrets Manager secret ID for database credentials | string | # Optional (default: empty)
+AWS_DB_SECRET_ID=
+
+# --- AWS Secrets Manager ---
+# Enable AWS Secrets Manager for database/Redis credential retrieval | boolean | # Optional (default: false)
+USE_AWS_SECRETS_MANAGER=false
 
 # --- Price feed ---
 # Base URL for Reflector oracle or CoinGecko API (set to http://localhost:8080 or http://reflector-mock:8080 for offline dev) | URL | # Optional (default: empty; uses CoinGecko API)
@@ -97,6 +115,14 @@ RATE_LIMIT_WRITE_BURST_MAX=3
 # --- Queue and caching ---
 # Redis URL for BullMQ queues/workers | URL | # Optional (default: redis://localhost:6379)
 REDIS_URL=redis://localhost:6379
+# Redis auth token injected into REDIS_URL for authenticated connections | string | # Optional (default: empty)
+REDIS_AUTH_TOKEN=
+# Redis password (fallback alias for REDIS_AUTH_TOKEN) | string | # Optional (default: empty)
+REDIS_PASSWORD=
+# AWS Secrets Manager ARN for Redis credentials | string | # Optional (default: empty)
+REDIS_SECRET_ARN=
+# AWS Secrets Manager secret ID for Redis credentials | string | # Optional (default: empty)
+AWS_REDIS_SECRET_ID=
 # Toggle in-memory portfolio cache for experiments | boolean | # Optional (default: false)
 USE_MEMORY_CACHE=false