docs(env): update JWT expiry default and admin configuration

- Change JWT_EXPIRY_HOURS default from 1 hour to 720 hours (1 month)
- Update ADMIN OVERRIDE to REQUIRED for the single administrator account setting
- Clarify optional rate limit configuration for API endpoints

Author: fulleni

.env.example

@@ -12,8 +12,8 @@
 # JWT_SECRET_KEY="your-super-secret-and-long-jwt-key"
 
 # OPTIONAL: The duration for which a JWT is valid, in hours.
-# Defaults to 1 hour if not specified.
-# JWT_EXPIRY_HOURS="1"
+# Defaults to 720 hour (1 month) if not specified.
+# JWT_EXPIRY_HOURS="720"
 
 # REQUIRED FOR PRODUCTION: The specific origin URL of your web client.
 # This allows the client (e.g., the HT Dashboard) to make requests to the API.
@@ -34,7 +34,7 @@
 # Use "https://api.eu.sendgrid.com" for EU-based accounts.
 # SENDGRID_API_URL="https://api.sendgrid.com"
 
-# ADMIN OVERRIDE: Sets the single administrator account for the application.
+# REQUIRED: Sets the single administrator account for the application.
 # On server startup, the system ensures that the user with this email is the
 # one and only administrator.
 # - If no admin exists, one will be created with this email.
@@ -44,15 +44,15 @@
 # This provides a secure way to set or recover the admin account.
 # OVERRIDE_ADMIN_EMAIL="admin@example.com"
 
-# OPTIONAL: Configure API request limits to prevent abuse.
-# The application provides sensible defaults if these are not set.
-#
-# Limit for the /auth/request-code endpoint (requests per window).
+
+# OPTIONAL: Limit for the /auth/request-code endpoint (requests per window).
 # RATE_LIMIT_REQUEST_CODE_LIMIT=3
-# Window for the /auth/request-code endpoint, in hours.
+
+# OPTIONAL: Window for the /auth/request-code endpoint, in hours.
 # RATE_LIMIT_REQUEST_CODE_WINDOW_HOURS=24
-#
-# Limit for the generic /data API endpoints (requests per window).
+
+# OPTIONAL: Limit for the generic /data API endpoints (requests per window).
 # RATE_LIMIT_DATA_API_LIMIT=1000
-# Window for the /data API endpoints, in minutes.
+
+# OPTIONAL: Window for the /data API endpoints, in minutes.
 # RATE_LIMIT_DATA_API_WINDOW_MINUTES=60