chore: add environment example

Author: xiaojiou176

.env.example

@@ -0,0 +1,85 @@
+# =========================
+# Movi environment template
+# SSOT facts: contracts/runtime/env_contract_registry.yaml
+# Policy / explain: docs/env_contract.md
+# Copy to .env and fill real values.
+# Sensitive values policy: only set via .env or shell environment variables.
+# =========================
+
+# [Minimal template - required]
+GEMINI_API_KEY=
+GEMINI_MODEL=gemini-3-flash-preview
+# The remaining variables stay as commented placeholders.
+# Enable them only when needed; they are not part of the minimum local setup.
+
+# [runtime-optional - live integration]
+# MOVI_RUN_LIVE_TESTS=0
+# MOVI_LIVE_TEST_URL=
+# MOVI_LIVE_COVERAGE_FILE=
+# LIVE_COVERAGE_FILE=
+# LIVE_HEARTBEAT_INTERVAL_SECONDS=20
+# LIVE_MAX_DURATION_SECONDS=600
+# LIVE_MAX_RETRIES=2
+
+# [runtime-optional - rollback strict integrity]
+# This key is required when `strict_integrity=true` (the default for CLI/Web rollback).
+# Disabling strict integrity weakens rollback verification guarantees and should only
+# be used in tightly controlled debugging scenarios.
+# MOVI_ROLLBACK_HMAC_KEY=
+
+# [runtime-optional - container execution]
+# MOVI_ALLOW_HOST_EXECUTION=0
+# MOVI_ALLOW_EXTERNAL=0
+# MOVI_COMPOSE_FILE=docker-compose.yml
+# MOVI_COMPOSE_SERVICE=movi-ci
+# MOVI_CI_IMAGE=ghcr.io/<owner>/movi-ci@sha256:<digest>
+# MOVI_PREBUILT_VENV_DIR=/opt/movi-ci-venv
+# MOVI_WORKSPACE_ROOT=<workspace-root>
+# MOVI_INPUT_ROOT=<workspace-root>/data/raw
+# MOVI_OUTPUT_ROOT=<workspace-root>/data/organized
+# MOVI_MANIFEST_ROOT=<workspace-root>/.movi/manifests
+# MOVI_ARTIFACT_ROOT=<workspace-root>/.movi/artifacts
+# MOVI_EVIDENCE_BUNDLE_PATH=<workspace-root>/.movi/artifacts/evidence-bundle.json
+# MOVI_RUN_BUNDLE_ROOT=<workspace-root>/.movi/runs
+# MOVI_RUN_DIR=
+# MOVI_RUN_EVENTS_PATH=
+# MOVI_RUN_STDERR_PATH=
+# MOVI_RUN_SUMMARY_PATH=
+# MOVI_RUN_EVIDENCE_INDEX_PATH=
+# MOVI_WEB_API_HOST=127.0.0.1
+# MOVI_WEB_API_PORT=18080
+# MOVI_WEBUI_HOST=127.0.0.1
+# MOVI_WEBUI_PORT=5173
+# MOVI_VENV_DIR=~/.cache/movi-organizer/venv/default
+# MOVI_ATOMIC_ALLOWLIST=
+# MOVI_ATOMIC_MAX_FILES=12
+# MOVI_ATOMIC_MAX_LINES=400
+# MOVI_CLI_REPORT_BUDGET_MS=1500
+# MOVI_PRE_PUSH_MODE=standard
+# MOVI_REQUIRE_NON_EMPTY_RANGE=0
+# MOVI_ROLLBACK_RTO_BUDGET_MS=3000
+
+# [runtime-optional - script safety overrides]
+# CLEAN_CACHE_ROOT=
+# HEARTBEAT_INTERVAL_SECONDS=30
+# GEMINI_UI_AUDIT_MODEL=gemini-3-flash-preview
+# GEMINI_UI_AUDIT_TIMEOUT_MS=90000
+# QUALITY_GATE_MAX_STEP_SECONDS=0
+# QUALITY_GATE_ALLOW_LIVE_NETWORK_TIMEOUT=1
+# PYTEST_HEARTBEAT_NAME=pytest
+# PYTEST_MAX_DURATION_SECONDS=0
+
+# [runtime-optional - observability context]
+# MOVI_TRACE_ID=
+# MOVI_SESSION_ID=
+# MOVI_REQUEST_ID=
+# MOVI_USER_ID=cli_anonymous
+
+# [ci-only / test-only placeholders, do not set manually]
+# MOVI_IN_CONTAINER=1
+# MOVI_ENABLE_TEST_HOOKS=0
+# MOVI_APPLY_CRASH_AT=
+# PYTEST_CURRENT_TEST=
+# PRE_COMMIT_FROM_REF=
+# PRE_COMMIT_TO_REF=
+# LIVE_TEST_PID=