feat: harden A2A funnel and paid proposal intake

scripts/ecosystem-hunter.env.example

@@ -1,8 +1,9 @@
 # Copy to scripts/ecosystem-hunter.env and edit values
-MCP_API_KEY=vw_beta_promo_2026
+MCP_API_KEY=<YOUR_MCP_API_KEY>
 MCP_API_BASE=https://agent.wooo.work
 MCP_AGENT_ID=vibe-hunter-prod
 DEVELOPER_WALLET=acct_ecosystem_hunter
+# Safe defaults: observe first, then explicitly enable mutations after review.
 AUTO_CLAIM=false
 AUTO_SUBMIT=false
 AUTO_SUBMIT_PR_URL=https://github.com/vibework/a2a-ecosystem-hunter/pull/1
@@ -21,3 +22,22 @@ ECOSYSTEM_REPORT_PATH=/home/ollama/vibework-git/artifacts/ecosystem_hunter_repor
 REPORT_LOG_DIR=/home/ollama/vibework-git/.local/logs/agent-bounty-ecosystem-hunter
 STDOUT_LOG=/home/ollama/vibework-git/.local/logs/agent-bounty-ecosystem-hunter/ecosystem-hunter.stdout.log
 STDERR_LOG=/home/ollama/vibework-git/.local/logs/agent-bounty-ecosystem-hunter/ecosystem-hunter.stderr.log
+
+# Gateway-side safety switches expected by the web service.
+PUBLIC_MCP_BETA_TOKEN=<YOUR_PUBLIC_BETA_TOKEN>
+VIBEWORK_JOB_SECRET=<YOUR_CRON_JOB_SECRET>
+GITHUB_WEBHOOK_SECRET=<YOUR_GITHUB_WEBHOOK_SECRET>
+VIBEWORK_SITE_URL=https://vibework.wooo.work
+NEXT_PUBLIC_VIBEWORK_SITE_URL=https://vibework.wooo.work
+AGENT_GATEWAY_URL=https://agent.wooo.work
+VIBEWORK_TREASURY_USDC_ADDRESS=
+VIBEWORK_TREASURY_WALLET_LABEL=USDC Treasury
+AUTO_WHITELIST_EXTERNAL_AGENTS=false
+A2A_GROWTH_ENABLE_OUTBOUND=false
+A2A_LEAD_GEN_DRY_RUN=true
+A2A_LEAD_GEN_ENABLE_OUTBOUND=false
+A2A_LEAD_GEN_AGENT_CARD_URLS=
+A2A_LEAD_GEN_ALLOWED_RPC_ORIGINS=
+A2A_DISCOVERY_AGENT_CARD_URLS=
+ENABLE_MOCK_STAKING=false
+ENABLE_MOCK_SETTLEMENT=false