Move the demo market to Mexico City, priced in US dollars

The showcase was a Barcelona market: Catalan names, +34 numbers, euro
rates and "Carrer Example 12" on every job. Presented to a Mexican
client, all of that reads as somebody else's product.

City comes from NEXT_PUBLIC_CITY_* as before, now Ciudad de México at
19.4326/-99.1332, with MAPBOX_COUNTRY=mx. The seed's fallbacks were
Barcelona literals, so an unset env quietly seeded a different city
than the app rendered — they now agree.

Two db tests pinned the Barcelona centre as a hardcoded constant, which
is why the deck returned zero cards on the first run here: every pro was
a continent outside the radius. They read the same env as the seed now,
so the trap cannot recur.

Money: formatCents defaults to USD/en-US, and the nine hardcoded euro
signs across the card, search rows, quote strip and forms are dollars.
The rate NUMBERS are unchanged and still read high for CDMX — that is a
pricing decision, not a currency one, and is left alone deliberately.

Seed people are Mexican, addressed on real Roma/Condesa streets rotated
by index rather than one placeholder repeated. Phones moved to +52 55,
which moves the demo login to +525500000000 / 000000.

Also in here, from the same session:
- Sending a job now confirms. The mutation always succeeded; the sheet
  just closed with no receipt, which from the customer's side is
  indistinguishable from a dead button. Dismissing that receipt resolves
  as 'sent', so the card does not return to the deck.
- Media moves to DigitalOcean Spaces, with the public origin derived
  from bucket and region instead of a second env var to keep in sync.
- Managed-Postgres TLS: DATABASE_CA_CERT takes a path or inline PEM.
- The client-facing project panel beside the running app.
- Two profiles removed and four renamed to match their photos.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

.env.example

@@ -4,6 +4,11 @@ NEXT_PUBLIC_APP_URL=http://localhost:3000
 
 # ---- Database (Postgres 16 + PostGIS) ----
 DATABASE_URL=postgresql://linkder:linkder@localhost:5442/linkder
+# Managed Postgres only. Verifies the server's IDENTITY, not merely that the
+# link is encrypted — sslmode=require alone leaves you open to anything that can
+# answer for the hostname. Takes a path to the provider's .crt, or the PEM
+# inline for a platform whose secrets are environment variables.
+DATABASE_CA_CERT=
 
 # ---- Redis (pub/sub for SSE chat + BullMQ queues) ----
 REDIS_URL=redis://localhost:6389
@@ -46,7 +51,7 @@ AUTH_MICROSOFT_TENANT_ID=common
 # GitHub only returns a primary email if the OAuth app requests `user:email`
 # AND the account has a verified one; a user whose email is private signs up
 # with no address, so never assume `users.email` is reachable mail — gate
-# outbound on isSyntheticEmail() from @linkder/shared, same as phone signups.
+# outbound on isSyntheticEmail() from @linkdr/shared, same as phone signups.
 AUTH_GITHUB_ID=
 AUTH_GITHUB_SECRET=
 
@@ -63,7 +68,7 @@ AUTH_GITHUB_SECRET=
 MAPBOX_TOKEN=
 # ISO 3166-1 alpha-2. Bounds results to one country: "Carrer de Sants" matches
 # in several places and the wrong continent is a worse answer than none.
-MAPBOX_COUNTRY=es
+MAPBOX_COUNTRY=mx
 
 # ---- Phone OTP (Twilio Verify) ----
 TWILIO_ACCOUNT_SID=
@@ -82,21 +87,14 @@ DIDIT_API_KEY=
 DIDIT_WORKFLOW_ID=
 DIDIT_WEBHOOK_SECRET=
 
-# ---- Cloudflare R2 (S3-compatible object storage) ----
-R2_ACCOUNT_ID=
-R2_ACCESS_KEY_ID=
-R2_SECRET_ACCESS_KEY=
-R2_BUCKET=linkder-uploads
-R2_PUBLIC_URL=
-
 # ---- Resend (transactional email) ----
 RESEND_API_KEY=
-EMAIL_FROM=noreply@linkder.app
+EMAIL_FROM=noreply@linkdr.app
 
 # ---- Launch market (city-scoped MVP) ----
-NEXT_PUBLIC_CITY_NAME=Barcelona
-NEXT_PUBLIC_CITY_LAT=41.3874
-NEXT_PUBLIC_CITY_LNG=2.1686
+NEXT_PUBLIC_CITY_NAME=Ciudad de México
+NEXT_PUBLIC_CITY_LAT=19.4326
+NEXT_PUBLIC_CITY_LNG=-99.1332
 TWILIO_FROM_NUMBER=
 
 # Dev-only fixed login (+34600000000 / code 000000). MUST stay false/unset in production.
@@ -105,3 +103,10 @@ ALLOW_DEV_LOGIN=false
 # Bugsink (Sentry-compatible error tracking). Write-only ingest key, safe in the
 # client bundle. Leave blank to disable reporting entirely.
 NEXT_PUBLIC_SENTRY_DSN=
+
+# ---- Object storage (DigitalOcean Spaces) ----
+SPACES_REGION=nyc3
+SPACES_BUCKET=
+SPACES_KEY=
+SPACES_SECRET=
+SPACES_CDN_URL=