Deploy Fly: application_url/app_proxy/redirect -> recesso-custom.fly.dev + escludi .env dall'immagine

- shopify.app.toml: URL Shopify puntano all'app Fly (custom distribution) invece del tunnel dev.
- .dockerignore: esclude .env, *cred*, .shopify (niente segreti dev nell'immagine prod).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Mv83a29B4eFv5ixoj6PoE1

app/.dockerignore

@@ -1,3 +1,7 @@
 .cache
 build
 node_modules
+.env
+.env.*
+*[Cc]red*
+.shopify

app/shopify.app.toml

@@ -3,14 +3,14 @@
 client_id = "8d67c00a078a615037497ad056f7f99d"
 name = "Legal Return PCRT "
 # DEV: quick tunnel Cloudflare (no interstitial). Auto-update Dev Dashboard rotto → settato via deploy. Cambia se il tunnel riparte.
-application_url = "https://miscellaneous-connections-harvest-chronicle.trycloudflare.com"
+application_url = "https://recesso-custom.fly.dev"
 embedded = true
 
 # App Proxy: lo storefront /apps/recesso viene proxato a <application_url>/proxy.
 # NB: se il tunnel Cloudflare (application_url) cambia, aggiornare anche `url` qui.
 # Richiede `shopify app deploy` perché la configurazione abbia effetto.
 [app_proxy]
-url = "https://miscellaneous-connections-harvest-chronicle.trycloudflare.com/proxy"
+url = "https://recesso-custom.fly.dev/proxy"
 subpath = "recesso"
 prefix = "apps"
 
@@ -49,7 +49,7 @@ use_legacy_install_flow = false
 
 [auth]
 redirect_urls = [
-  "https://miscellaneous-connections-harvest-chronicle.trycloudflare.com/auth/callback",
-  "https://miscellaneous-connections-harvest-chronicle.trycloudflare.com/auth/shopify/callback",
-  "https://miscellaneous-connections-harvest-chronicle.trycloudflare.com/api/auth/callback"
+  "https://recesso-custom.fly.dev/auth/callback",
+  "https://recesso-custom.fly.dev/auth/shopify/callback",
+  "https://recesso-custom.fly.dev/api/auth/callback"
 ]