Commit .env.development/.staging/.production and track env files in git
(matching uirefbase convention). No secrets: SSO_URL (sso-mock service),
NEXT_PUBLIC_APP_URL (callback), SSO_APP_ID. .gitignore now ignores only
*.local overrides.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Next.js sample application that integrates with the mock SSO service:
redirects to sso-mock for login, receives the one-time sso_code on its
/callback route, and exchanges it for user info to establish a session.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>