wip(TRUEREF-0018): commit version-scoped indexing work

.env.example

@@ -1,2 +1,22 @@
 # Drizzle
 DATABASE_URL=local.db
+
+# ---------------------------------------------------------------------------
+# Corporate Deployment (TRUEREF-0019)
+# ---------------------------------------------------------------------------
+# These variables enable TrueRef to work with private git repositories
+# hosted on corporate Bitbucket Server/Data Center or self-hosted GitLab.
+
+# Corporate CA certificate (PEM or DER format, auto-detected)
+# Export from Windows: certmgr.msc → Trusted Root → Export with Base64
+# CORP_CA_CERT=C:/path/to/corp-ca.crt
+
+# Git remote hostnames (without https://)
+# BITBUCKET_HOST=bitbucket.corp.example.com
+# GITLAB_HOST=gitlab.corp.example.com
+
+# Personal access tokens (NEVER commit these to version control)
+# Bitbucket Server: Settings → HTTP access tokens
+# GitLab: User Settings → Access Tokens → read_repository scope
+# GIT_TOKEN_BITBUCKET=
+# GIT_TOKEN_GITLAB=