✨ feat: add Google and Apple OAuth via better-auth socialProviders

.env.production.example

@@ -1,8 +1,25 @@
 OPENROUTER_API_KEY=
-AUTH_AUTHENTIK_CLIENT_ID=
-AUTH_AUTHENTIK_CLIENT_SECRET=XXXXXXXXXXXXXXXX
-AUTH_AUTHENTIK_ISSUER=XXXXXXXXXXXXXXXXXXX
 
-BETTER_AUTH_URL=XXXXXXXXXXXXXXXXXXX
-BETTER_AUTH_SECRET=XXXXXXXXXXX
-DB_URL=XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
+# --- Auth (all providers are optional; configure only what you need) ---
+
+# Authentik (genericOAuth)
+AUTH_AUTHENTIK_CLIENT_ID=
+AUTH_AUTHENTIK_CLIENT_SECRET=
+AUTH_AUTHENTIK_ISSUER=
+
+# Google OAuth — https://console.cloud.google.com/
+AUTH_GOOGLE_CLIENT_ID=
+AUTH_GOOGLE_CLIENT_SECRET=
+
+# Apple Sign In — https://developer.apple.com/account/resources/authkeys/list
+# AUTH_APPLE_CLIENT_SECRET is a pre-generated JWT signed with the .p8 key.
+# See: https://better-auth.com/docs/authentication/apple
+AUTH_APPLE_CLIENT_ID=
+AUTH_APPLE_CLIENT_SECRET=
+AUTH_APPLE_TEAM_ID=
+AUTH_APPLE_KEY_ID=
+AUTH_APPLE_PRIVATE_KEY=
+
+BETTER_AUTH_URL=
+BETTER_AUTH_SECRET=
+DATABASE_URL=