[MugdhoAI]

Summary

• Reject the JWT placeholder used by .env.example when ENVIRONMENT=production.
• Normalize surrounding whitespace and case before checking known placeholder values.
• Add a regression test that reads the actual example value from .env.example, so it cannot silently pass production validation.

Verification

• GitHub Actions CI and CodeQL will run on this pull request.

Scope

This is a focused configuration validation fix. It does not change development configuration behavior or claim that the project is production ready.