GITHUB_TOKENGitHub PAT — scope public_repo is enough: DevHub creates public repos
→ github.com/settings/tokens
RAILWAY_API_TOKENDeploy backends to Railway
→ railway.app → Account → API Tokens
VERCEL_API_TOKENDeploy frontends to Vercel + write <slug>.aevion.app DNS records (the zone lives at Vercel)
→ vercel.com/account/tokens
CLOUDFLARE_ACCOUNT_IDAccount ID for Cloudflare Pages deploy
→ dash.cloudflare.com → right sidebar
CLOUDFLARE_API_TOKENDeploy to Pages + attach the aevion.app subdomain to the Pages project
→ dash.cloudflare.com → Profile → API Tokens
REPLICATE_API_TOKENAI video generation
→ replicate.com/account/api-tokens
OPENAI_API_KEYDALL-E 3 image generation
→ platform.openai.com/api-keys
ELEVENLABS_API_KEYTTS, music, SFX, voice cloning
→ elevenlabs.io/app/settings/api-keys
BREVO_API_KEYEmail, SMS, WhatsApp
→ app.brevo.com/settings/keys/api