Expose the Endorser API base URL from the environment (defaulting to production) so later auth work can call it without hardcoding.
Document PORT, Firebase credentials, FCM token data dir, and test-local NODE_ENV so developers can copy the file to .env without guessing vars.