projection: begin the exact-path public epoch

The public tree and its history contain only the listed paths. Earlier projection history remains preserved internally.

Source-Sha: 913fde029b935671833254797f0f20f1eb9fabba

Policy-Sha: 913fde029b935671833254797f0f20f1eb9fabba

Tree-Digest: 180ae530c1058a2a5c89837bdce2d323ae83e669e38590ca72e75b8d92b7262f

installer/windows/config/redflag.env.example

@@ -0,0 +1,43 @@
+# ============================================================
+# RedFlag Server — native Windows configuration
+# Copy this file to: redflag.env (same folder), edit it, then
+# restart the "RedFlag Server" service (services.msc or:
+#   net stop RedFlagServer && net start RedFlagServer
+# ============================================================
+# This is the native-install equivalent of config/.env.example
+# in the main repo — same variables, same semantics. Docker gets
+# these from docker-compose's env_file:; this binary reads this
+# file directly (server/internal/config/config.go loadNativeConfigFile).
+
+# --- PostgreSQL ---
+# Point this at a Postgres instance you provide — same as the docker
+# stack's postgres:16-alpine container, just not bundled by this installer.
+REDFLAG_DB_HOST=localhost
+REDFLAG_DB_PORT=5432
+REDFLAG_DB_NAME=redflag
+REDFLAG_DB_USER=redflag
+REDFLAG_DB_PASSWORD=CHANGE_ME_pick_a_strong_db_password
+
+# --- Server ---
+REDFLAG_SERVER_HOST=0.0.0.0
+REDFLAG_SERVER_PORT=8080
+
+# --- Admin Account ---
+# After first-run setup these are persisted in the database;
+# these values re-apply on service restart.
+REDFLAG_ADMIN_USER=admin
+REDFLAG_ADMIN_EMAIL=admin@example.com
+REDFLAG_ADMIN_PASSWORD=CHANGE_ME_pick_a_strong_admin_password
+REDFLAG_JWT_SECRET=CHANGE_ME_random_string_at_least_32_characters_long
+
+# --- Agent Registration ---
+REDFLAG_TOKEN_EXPIRY=24h
+REDFLAG_MAX_TOKENS=100
+REDFLAG_MAX_SEATS=50
+
+# --- Ed25519 Signing Key ---
+# Leave blank on first run. Go to http://localhost:8080/setup and click
+# "Generate Keys". Copy the private key here, then restart the service.
+# Without this, agents cannot receive signed commands or upgrade themselves.
+# BACKUP THE PRIVATE KEY. Losing it means re-enrolling every agent.
+REDFLAG_SIGNING_PRIVATE_KEY=