Initial scaffold: Shopify recesso (withdrawal) compliance app

- Remix (TypeScript) + Polaris, official Shopify app template
- Prisma multi-tenant schema (Settings, ExclusionRule, WithdrawalRequest, AuditLog, WebhookEvent) on Postgres
- Mandatory GDPR compliance webhooks (data_request, redact, shop/redact) + HMAC handlers
- API version pinned 2026-04, scopes read_orders/read_products
- Fly deploy config; two-env strategy (custom now, public later)
- Dev setup: shopify.web.toml + Vite allowedHosts for tunnels
- Docs: PLAN.md, ANALISI-REQUISITI-LEGALI.md (Art. 54-bis compliance)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Mv83a29B4eFv5ixoj6PoE1

app/.env.example

@@ -0,0 +1,15 @@
+# Copy this file to `.env` and fill in real values. NEVER commit `.env`.
+# In production (Fly) these are provided via `fly secrets set`, not this file.
+
+# Shopify app credentials — from the Partner Dashboard app "Legal Return PCRT".
+SHOPIFY_API_KEY=your_api_key_here
+SHOPIFY_API_SECRET=your_api_secret_here
+
+# Access scopes — keep in sync with shopify.app.toml [access_scopes].scopes
+SCOPES=read_orders,read_products
+
+# Public URL of the app (dev tunnel, or the Fly URL in prod). No trailing slash.
+SHOPIFY_APP_URL=https://your-tunnel-or-fly-url.example
+
+# Postgres connection string (Fly Postgres or Supabase).
+DATABASE_URL=postgresql://user:password@host:5432/recesso?sslmode=require