Refactor org backend and remove obsolete code

README.md

@@ -31,6 +31,12 @@ Create that file once on the server with the production values required by the
 app. The Gitea deploy step verifies that it exists, but it does not create or
 overwrite it.
 
+Datasource credentials and `JWT_SECRET` are required environment values; they
+are intentionally not stored in the Spring profile files. Start from
+`misc/org-backend.env.example` and keep the populated file outside the
+repository. Rotate any credential that was previously committed before using
+this version in production.
+
 The live systemd unit at `/etc/systemd/system/org-backend.service` is managed
 as a symlink to `misc/org-backend.service`, so the project copy is the source of
 truth.