chore(V2): .env.example consolidato, .env gitignored

.env.example

@@ -1,7 +1,54 @@
-GATEWAY_PORT=8080
+# ============================================================
+# CERBERO MCP — V2.0.0
+# Copy to .env and fill in values. .env is gitignored.
+# Generate tokens: python -c 'import secrets; print(secrets.token_urlsafe(32))'
+# ============================================================
 
-# Override ambiente per ogni MCP exchange (precedenza: env > secret > default)
+# ─── SERVER ─────────────────────────────────────────────────
-DERIBIT_TESTNET=true
+HOST=0.0.0.0
-BYBIT_TESTNET=true
+PORT=9000
-HYPERLIQUID_TESTNET=true
+LOG_LEVEL=info
-ALPACA_PAPER=true
+
+# ─── AUTH — token bearer per env routing ──────────────────
+# Bot manda Authorization: Bearer <TOKEN>:
+#   - TESTNET_TOKEN → request va a base_url_testnet
+#   - MAINNET_TOKEN → request va a base_url_live
+TESTNET_TOKEN=
+MAINNET_TOKEN=
+
+# ─── EXCHANGE — DERIBIT ───────────────────────────────────
+DERIBIT_CLIENT_ID=
+DERIBIT_CLIENT_SECRET=
+DERIBIT_URL_LIVE=https://www.deribit.com/api/v2
+DERIBIT_URL_TESTNET=https://test.deribit.com/api/v2
+DERIBIT_MAX_LEVERAGE=3
+
+# ─── EXCHANGE — BYBIT ─────────────────────────────────────
+BYBIT_API_KEY=
+BYBIT_API_SECRET=
+BYBIT_URL_LIVE=https://api.bybit.com
+BYBIT_URL_TESTNET=https://api-testnet.bybit.com
+BYBIT_MAX_LEVERAGE=3
+
+# ─── EXCHANGE — HYPERLIQUID ───────────────────────────────
+HYPERLIQUID_WALLET_ADDRESS=
+HYPERLIQUID_API_WALLET_ADDRESS=
+HYPERLIQUID_PRIVATE_KEY=
+HYPERLIQUID_URL_LIVE=https://api.hyperliquid.xyz
+HYPERLIQUID_URL_TESTNET=https://api.hyperliquid-testnet.xyz
+HYPERLIQUID_MAX_LEVERAGE=3
+
+# ─── EXCHANGE — ALPACA ────────────────────────────────────
+ALPACA_API_KEY_ID=
+ALPACA_SECRET_KEY=
+ALPACA_URL_LIVE=https://api.alpaca.markets
+ALPACA_URL_TESTNET=https://paper-api.alpaca.markets
+ALPACA_MAX_LEVERAGE=1
+
+# ─── DATA PROVIDERS — MACRO ───────────────────────────────
+FRED_API_KEY=
+FINNHUB_API_KEY=
+
+# ─── DATA PROVIDERS — SENTIMENT ───────────────────────────
+CRYPTOPANIC_KEY=
+LUNARCRUSH_KEY=