Create a least-privilege, read-only DB role for the public serving path; wire connection via env vars (.env). Depends on #1.
Create a least-privilege, read-only DB role for the public serving path; wire connection via env vars (.env). Depends on #1.