fix(build): make wheels-starter-app installable and bootable from ForgeBox

[bpamiri]

Problem

The published wheels-starter-app ForgeBox package was unusable end-to-end:

(a) box install wheels-starter-app FAILED. box.json declared a dependency on slug wheels-authenticateThis, which does not exist on ForgeBox, aborting the entire install:

× | Installing package [forgebox:wheels-authenticateThis]
ERROR  Error getting ForgeBox entry [wheels-authenticateThis]
The entry slug sent is invalid or does not exist

The authenticateThis() mechanism the app actually uses (app/models/User.cfc:34) is supplied by the plugin already vendored at plugins/authenticateThis/. The ForgeBox dependency was redundant and broken.

(b) Even when installed, the app booted HTTP 500 key [DB_CLASS] doesn't exist at config/app.cfm:14 — the datasource read this.env.DB_CLASS, but no .env ships or is scaffolded (only .env.example), so this.env was an empty struct.

Both reproduced in CommandBox docker before fixing (verify-first).

Fix

• box.json — drop the bogus wheels-authenticateThis dependency + installPath. Keep wheels-core so the framework still lands in vendor/wheels/. box install now succeeds (wheels-core only); the auth plugin is already bundled.
• config/app.cfm — replace the .env-driven MySQL datasource with a zero-config H2 embedded database (org.h2.Driver, bundled with Lucee — no extra JDBC driver). MODE=MySQL keeps MySQL-compatible SQL. Adds a starterApp_test datasource for the app test suite.
• server.json — declare the H2 Lucee extension in an env block so box server start auto-installs it. No manual LUCEE_EXTENSIONS or .env needed.
• db/h2/.keep + .gitignore — ship the H2 data directory; ignore the runtime .db files.
• .env.example / README.md — .env is now optional and documented as such; server-based-DB instructions (incl. the original MySQL example) preserved in comments. README Quick Start rewritten to the real flow.

Note: wheels-core ships the SQLite adapter but not the SQLite JDBC driver — the driver only exists on the Wheels CLI's bundled Lucee, not on a stock box install / CommandBox Lucee. H2 is the only embedded engine that loads zero-config on stock Lucee (via the bundled extension), so it is the correct default for the ForgeBox/CommandBox path.

Verification (CommandBox docker, ortussolutions/commandbox:latest, against prepare-starterApp.sh build output)

1. box install → SUCCEEDS (only wheels-core; no slug error)
2. box server start → boots; H2 extension auto-installs; datasource loads (/wheels/cli ping returns "success":true, no cannot load class, no DB_CLASS error)
3. wheels migrate latest → creates all tables + seeds default roles/users/settings/permissions
4. GET / after fresh app-scope restart → HTTP 200, renders <title>Example App</title> (seeded general_sitename) and the navbar/login link

Fixes #3181

🤖 Generated with Claude Code