Notifications

Added a cron job processor so emails and notifications can get processed.

Added super admin settings with a gui to edit.

.env.business.example

@@ -49,18 +49,23 @@ NEXT_PUBLIC_APP_URL="https://example-business.example.com"
 # openssl rand -hex 32
 INSTALLATION_TOKEN="replace-me"
 # Shared secret an external scheduler presents to
-# /api/cron/process-notifications — generate with: openssl rand -hex 32
+# /api/cron/process-notifications and /api/cron/sync-google-reviews —
+# generate with: openssl rand -hex 32. Without something actually calling
+# those on a schedule, queued notifications (staff invites, reminders,
+# etc.) never get sent — see the root README's "Notification delivery"
+# section and stacks/infra/scripts/process-cron.sh for the one-time
+# crontab setup this requires.
 CRON_SECRET="replace-me"
 
 # ── Super Administrator (optional — see scripts/ensure-super-admin.ts) ──
 # Platform-level account with every Owner permission for THIS business.
-# Not run automatically by this compose file (that's a Docker-entrypoint-
-# only behaviour, see docker/entrypoint.sh) — run it manually, once:
-#   docker exec -it next-chair-example-business npx tsx scripts/ensure-super-admin.ts
-# Leave SUPER_ADMIN_EMAIL blank to skip entirely and use the /install
-# wizard's own administrator account instead.
+# Runs automatically on every container start (see docker/entrypoint.sh)
+# — filling these in and recreating the container is enough, no manual
+# `docker exec` needed. No password — signs in the same OTP way as
+# everyone else, via a one-time code emailed to SUPER_ADMIN_EMAIL. Leave
+# SUPER_ADMIN_EMAIL blank to skip entirely and use the /install wizard's
+# own administrator account instead.
 SUPER_ADMIN_EMAIL=""
-SUPER_ADMIN_PASSWORD=""
 SUPER_ADMIN_FIRST_NAME=""
 SUPER_ADMIN_LAST_NAME=""