feat: ratelimit, ghcr package support, media path sensitization, LID to CN migration (#6)

* feat: ratelimit, ghcr package and proper project refactor from askarzh

* fix(bridge): validate media path

* update: dependencies

* fix: added LID to contact number migration

whatsapp-mcp-server/.env.example

@@ -0,0 +1,15 @@
+# === REQUIRED ===
+# Same value as WHATSAPP_API_KEY in the bridge's .env.
+# The MCP server presents this to the bridge's /auth/login endpoint
+# to obtain a short-lived JWT for /api/* calls.
+# (WHATSAPP_API_SECRET is also accepted as a deprecated alias.)
+WHATSAPP_API_KEY=
+
+# === OPTIONAL ===
+# Bridge API base URL. Default: http://localhost:8080/api.
+API_BASE_URL=http://localhost:8080/api
+
+# === HTTP mode (optional) ===
+# Set IS_HTTP=true to expose MCP over HTTP instead of stdio.
+IS_HTTP=false
+HTTP_BASE_URL=0.0.0.0:5777