Included .env. Replace only DB_PASSWORD on server. Never expose .env publicly.
This is source code, NOT a ready-to-run production package: Composer vendor dependencies are missing.
Database already imported: do NOT run initial migrations against those tables.
Authentication/permissions and customer portal require more work before production use.
