feat: ratelimit, ghcr package support, media path sensitization, LID to CN migration (#6)

* feat: ratelimit, ghcr package and proper project refactor from askarzh

* fix(bridge): validate media path

* update: dependencies

* fix: added LID to contact number migration

whatsapp-bridge/.env.example

@@ -0,0 +1,28 @@
+# === REQUIRED ===
+# Static API key the MCP server uses to call /auth/login.
+# Generate with: openssl rand -base64 48
+# Must match WHATSAPP_API_KEY in whatsapp-mcp-server/.env.
+WHATSAPP_API_KEY=
+
+# HMAC secret used to sign 45-min JWTs returned from /auth/login.
+# Generate with: openssl rand -base64 48
+WHATSAPP_JWT_SECRET=
+
+# === REQUIRED for Postgres mode ===
+# Set IS_POSTGRES=true to use Postgres; otherwise SQLite at ./store/.
+IS_POSTGRES=true
+POSTGRES_USER=
+POSTGRES_PASS=
+POSTGRES_HOST=
+POSTGRES_PORT=5432
+
+# === OPTIONAL ===
+# Bind address for the REST API server. Empty means all interfaces.
+HOST=
+PORT=8080
+# Forwarded webhook URL for incoming messages (empty disables).
+WEBHOOK_URL=
+# Login rate limit. Format: <count>/<window>. Default: 5/1m.
+AUTH_LOGIN_RATE=
+# Logger level: debug | info | warn | error. Default: info.
+LOG_LEVEL=info