fix: move hardcoded DB password to env variable

.env.example

@@ -1,5 +1,8 @@
 ROOT_ADMIN_EMAIL=""
 
+# Docker Compose database password (used in docker-compose.yml)
+DB_PASSWORD=""
+
 DATABASE_URL="postgres://user:password@host:port/db-name"
 
 ORIGIN=""

docker-compose.yml

@@ -5,7 +5,7 @@ services:
     environment:
       POSTGRES_DB: vash
       POSTGRES_USER: vash
-      POSTGRES_PASSWORD: ***REMOVED***
+      POSTGRES_PASSWORD: ${DB_PASSWORD}
     volumes:
       - pgdata:/var/lib/postgresql/data
     ports:
@@ -27,7 +27,7 @@ services:
     ports:
       - '127.0.0.1:3000:3000' # Only accessible from host (nginx proxies)
     environment:
-      DATABASE_URL: postgresql://vash:***REMOVED***@db:5432/vash
+      DATABASE_URL: postgresql://vash:${DB_PASSWORD}@db:5432/vash
       ORIGIN: ${ORIGIN:-https://esports.vash.software}
       BETTER_AUTH_SECRET: ${BETTER_AUTH_SECRET}
       OSU_CLIENT_ID: ${OSU_CLIENT_ID}