No Firebase private key is included.
Set FIREBASE_SERVICE_ACCOUNT_PATH to a newly rotated service-account JSON stored outside the public web directory.
