feat: sase.tr v2 full application implementation

Complete rewrite of sase.tr VIN lookup platform with modern stack:

Backend (NestJS 10 + Drizzle ORM + PostgreSQL + Redis + BullMQ):
- 34 DB models (core + PL24 + EMEX schemas)
- Auth via Better Auth (email/password + social)
- Brands, Plans, Subscriptions, Payments (iyzico + EFT)
- VIN decode orchestration (Corgi + PL24 + EMEX + NHTSA)
- Interactive schema viewer backend (MinIO storage)
- EMEX scraping integration (Puppeteer + BullMQ workers)
- Translation module (EN→TR automotive dictionary)
- Admin dashboard API (stats, user mgmt, payment approval)
- Rate limiting, Helmet security, file upload validation

Frontend (Next.js 15 + Tailwind v4 + shadcn/ui + TanStack Query + Zustand):
- 20 routes: auth, dashboard, VIN search, schema viewer, admin
- Interactive schema viewer with zoom/pan/hotspot highlighting
- Subscription management with brand selector
- Payment flow (iyzico 3D Secure + EFT with receipt upload)
- i18n support (TR/EN)
- Error boundaries, loading skeletons, 404 page

Infrastructure:
- 85 tests (52 backend + 33 frontend, Vitest)
- CI/CD (GitHub Actions: lint, typecheck, test, build, deploy)
- Zero-downtime deploy script (PM2)
- Env validation script

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

scripts/validate-env.sh

@@ -0,0 +1,117 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+# ──────────────────────────────────────────────
+# Environment variable validation script
+# ──────────────────────────────────────────────
+
+ERRORS=0
+LOG_PREFIX="[env-check]"
+
+log() {
+  echo "$(date '+%Y-%m-%d %H:%M:%S') $LOG_PREFIX $1"
+}
+
+check_var() {
+  local var_name="$1"
+  local var_value="${!var_name:-}"
+
+  if [ -z "$var_value" ]; then
+    log "MISSING: $var_name is not set"
+    ERRORS=$((ERRORS + 1))
+    return 1
+  fi
+  return 0
+}
+
+check_var_format() {
+  local var_name="$1"
+  local pattern="$2"
+  local description="$3"
+  local var_value="${!var_name:-}"
+
+  if [ -z "$var_value" ]; then
+    return 0  # Already caught by check_var
+  fi
+
+  if ! echo "$var_value" | grep -qE "$pattern"; then
+    log "INVALID: $var_name - $description (got: ${var_value:0:20}...)"
+    ERRORS=$((ERRORS + 1))
+    return 1
+  fi
+  return 0
+}
+
+log "Validating environment variables..."
+echo ""
+
+# ── Required variables ──
+log "Checking required variables..."
+
+check_var "NODE_ENV"
+check_var "DATABASE_URL"
+check_var "REDIS_HOST"
+check_var "REDIS_PORT"
+check_var "REDIS_PASSWORD"
+check_var "BETTER_AUTH_SECRET"
+check_var "BETTER_AUTH_URL"
+check_var "MINIO_ENDPOINT"
+check_var "MINIO_ACCESS_KEY"
+check_var "MINIO_SECRET_KEY"
+check_var "MINIO_BUCKET_NAME"
+check_var "MINIO_PUBLIC_URL"
+check_var "CORS_ORIGIN"
+
+echo ""
+
+# ── Format validation ──
+log "Validating variable formats..."
+
+check_var_format "DATABASE_URL" "^postgres(ql)?://" \
+  "must start with postgres:// or postgresql://"
+
+check_var_format "BETTER_AUTH_URL" "^https?://" \
+  "must be a valid URL starting with http:// or https://"
+
+check_var_format "MINIO_PUBLIC_URL" "^https?://" \
+  "must be a valid URL starting with http:// or https://"
+
+check_var_format "CORS_ORIGIN" "^https?://" \
+  "must be a valid URL starting with http:// or https://"
+
+check_var_format "REDIS_PORT" "^[0-9]+$" \
+  "must be a numeric port number"
+
+check_var_format "NODE_ENV" "^(development|production|test)$" \
+  "must be one of: development, production, test"
+
+if [ -n "${BETTER_AUTH_SECRET:-}" ]; then
+  if [ ${#BETTER_AUTH_SECRET} -lt 32 ]; then
+    log "INVALID: BETTER_AUTH_SECRET must be at least 32 characters (got: ${#BETTER_AUTH_SECRET})"
+    ERRORS=$((ERRORS + 1))
+  fi
+fi
+
+echo ""
+
+# ── Optional variables (warn if missing) ──
+log "Checking optional variables (warnings only)..."
+
+for var in IYZICO_API_KEY IYZICO_SECRET_KEY IYZICO_BASE_URL \
+           PL24_API_URL PL24_USERNAME PL24_PASSWORD \
+           EMEX_USERNAME EMEX_PASSWORD; do
+  if [ -z "${!var:-}" ]; then
+    log "WARNING: $var is not set (optional)"
+  fi
+done
+
+echo ""
+
+# ── Summary ──
+if [ $ERRORS -gt 0 ]; then
+  log "FAILED: $ERRORS error(s) found. Fix the issues above and try again."
+  exit 1
+else
+  log "PASSED: All required environment variables are valid."
+  exit 0
+fi