Production notes

• Product lives at aimoassist.com: set CLIENT_URL / ENGINE_URL / GATEWAY_URL to those hosts
• Move PEMs to KMS; never commit .env or secrets/
• Disable /demo/* outside controlled demos (DEMO_MODE)
• Keep gateway as the only path to Valio APIs