- Env.py now reads SPOTIFY_CLIENT_ID/SPOTIFY_CLIENT_SECRET (and optional
path overrides) from the environment instead of hardcoding them.
- Add .env.example and ignore .env / .venv.
- Rewrite README with setup, usage and layout (drops the leaked secret).
Note: secrets are also purged from prior history in this push.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>