feat: Complete PII cleanup and fully automatic pipeline

🧹 PII Cleanup & Security:
- Remove all hardcoded domains (darknex.us, hndrx.co)
- Remove all hardcoded emails (admin@ references)
- Replace all personal info with environment variables
- Repository now 100% generic and reusable

🚀 Fully Automatic Pipeline:
- Pipeline now runs automatically develop → staging → production
- No manual intervention required for production promotions
- Auto-promotion triggers after successful tests
- All workflows use commit-specific image tags

🔧 Environment Variables:
- All manifests use ${VARIABLE_NAME} syntax
- All scripts source from .env file
- GitHub Actions use secrets for sensitive data
- Complete .env.example template provided

📚 Documentation:
- New comprehensive WORKFLOWS.md with pipeline details
- New PIPELINE_QUICK_REFERENCE.md for quick reference
- Updated all docs to use generic placeholders
- Added security/privacy section to README

🔐 Security Enhancements:
- Updated .gitignore for all sensitive files
- Created PII verification script (verify-pii-removal.sh)
- Created cleanup automation script (cleanup-pii.sh)
- Repository verified PII-free and production-ready

BREAKING: Repository now requires .env configuration
- Copy .env.example to .env and configure for your environment
- Set GitHub repository secrets for CI/CD workflows
- All deployments now use environment-specific configuration

docs/SETUP.md

@@ -58,7 +58,7 @@ kubectl patch configmap/config-network \
 kubectl patch configmap/config-domain \
   --namespace knative-serving \
   --type merge \
-  --patch '{"data":{"wa.darknex.us":""}}'
+  --patch "{\"data\":{\"${KNATIVE_DOMAIN}\":\"\"}}"
 ```
 
 ### 4. Set up TLS (Optional but Recommended)
@@ -79,7 +79,7 @@ metadata:
 spec:
   acme:
     server: https://acme-v02.api.letsencrypt.org/directory
-    email: admin@darknex.us
+    email: ${CERT_EMAIL}
     privateKeySecretRef:
       name: letsencrypt-prod
     solvers:
@@ -112,10 +112,10 @@ After installation, configure your DNS to point to the Kourier LoadBalancer:
 
 2. **Create DNS records**:
    ```
-   2048-dev.wa.darknex.us      -> LoadBalancer IP
-   2048-staging.wa.darknex.us  -> LoadBalancer IP
-   2048.wa.darknex.us          -> LoadBalancer IP
-   *.wa.darknex.us             -> LoadBalancer IP (wildcard)
+   ${DEV_DOMAIN}      -> LoadBalancer IP
+   ${STAGING_DOMAIN}  -> LoadBalancer IP
+   ${PROD_DOMAIN}          -> LoadBalancer IP
+   *.${BASE_DOMAIN}             -> LoadBalancer IP (wildcard)
    ```
 
 ## Verification
@@ -153,7 +153,7 @@ kubectl get ksvc -n game-2048-dev
 
 3. **TLS certificates not issued**:
    - Check cert-manager logs: `kubectl logs -n cert-manager -l app=cert-manager`
-   - Verify DNS propagation: `dig 2048-dev.wa.darknex.us`
+   - Verify DNS propagation: `dig ${DEV_DOMAIN}`
 
 4. **Service not accessible**:
    - Check Kourier gateway logs: `kubectl logs -n kourier-system -l app=3scale-kourier-gateway`