# PostHog — publishable project API key (client-safe; ships in the client bundle).
# Find it in PostHog → Project Settings → Project API Key (starts with `phc_`).
#
# Canonical store: 1Password → Private → "forgedb.dev deploy" → "posthog project key".
# CI/prod: injected at BUILD time from a GitHub Actions secret (NEXT_PUBLIC_POSTHOG_KEY);
# `make website-secrets` pushes it there from 1Password. The build runs in GH Actions
# (not on Vercel — see issue #198), so the key lives in GH, not Vercel env.
# Local dev: NOT required. The `/relay` reverse proxy only exists on the Vercel deploy, so
# analytics is verified on a preview deploy, and local dev intentionally stays inert when
# this is unset. (You can still set it in `.env.local` if you want posthog-js to init.)
NEXT_PUBLIC_POSTHOG_KEY=