feat: add and document quickstart trial path

[gildesmarais]

Quickstart

Test drive the app with these steps:

1. Download docker-compose.quickstart.yml
2. docker compose -f docker-compose.quickstart.yml up -d
3. Open http://localhost:4000/ in your browser
4. When prompted for a token, use CHANGE_ME_ADMIN_TOKEN

---

This pull request introduces a new quickstart mode for easier local testing, refines configuration and environment variable handling, and tightens security validation around access tokens. It also updates documentation to streamline onboarding and clarifies the development process. The most important changes are grouped below.

Quickstart and Onboarding Improvements:

• Added a quickstart job to the CI workflow and a new docker-compose.quickstart.yml for fast local setup, with a default admin access token for testing. [1] [2]
• Updated the README.md to provide a simplified quickstart guide, removing older, more complex instructions and emphasizing the new workflow. [1] [2]

Configuration and Environment Handling:

• Changed the config file (config/feeds.yml) to use an ERB template for the admin token, which now defaults to a runtime environment value. The configuration loader now supports ERB evaluation. [1] [2] [3]
• Introduced HTML2RSS_ACCESS_TOKEN and related helpers in RuntimeEnv, and updated code and tests to use this new environment variable for authentication. [1] [2] [3] [4] [5] [6]

Security and Validation Enhancements:

• Strengthened production environment validation by enforcing non-placeholder, non-empty access tokens when auto source is enabled, and by validating account token shapes. [1] [2] [3]
• Expanded the list of sensitive environment variables to include the access token, ensuring they are scrubbed after validation. [1] [2]

Code and Test Updates:

• Updated health check and integration tests to use the new configuration loading methods and to expect the new access token handling. [1] [2] [3] [4] [5] [6]

These changes collectively make local setup easier, improve security defaults, and ensure configuration is robust and testable.

---

Summary

• make the quickstart path an explicit trial flow with a known token
• keep production auto-source strict by rejecting placeholder create-feed tokens
• verify the quickstart compose contract in CI and support local quickstart image builds

What changed

• add docker-compose.quickstart.yml as the minimal quickstart stack
• drive the admin account token from HTML2RSS_ACCESS_TOKEN via ERB-backed config loading
• remove the production quickstart carve-out from environment validation
• keep readiness checks reparsing current config through LocalConfig.load_snapshot
• add bin/quickstart-verify, bin/quickstart-up, and bin/quickstart-down
• add a quickstart CI job that validates the rendered quickstart compose contract

Quickstart behavior

• quickstart runs in RACK_ENV=development
• quickstart uses CHANGE_ME_ADMIN_TOKEN
• quickstart keeps Botasaurus wired for first-success UX
• local trial builds can override the image through HTML2RSS_WEB_IMAGE

Validation

• bin/quickstart-verify
• ruby -c bin/quickstart-verify
• bash -n bin/quickstart-up
• bash -n bin/quickstart-down
• docker compose -f docker-compose.quickstart.yml config --format json

[Copilot]

Pull request overview

Copilot reviewed 15 out of 18 changed files in this pull request and generated 2 comments.