[FIX] Fix some securiry issues

partitions/.env.example

@@ -0,0 +1,11 @@
+# Frontend Environment Variables
+# Copy this file to .env and update the values
+
+# API Configuration
+# Use HTTPS in production!
+VITE_API_URL=http://localhost:8000
+
+# Security Notes:
+# - Always use HTTPS in production
+# - Never commit the .env file with real secrets
+# - The JWT token is stored in localStorage (consider migrating to httpOnly cookies for better security)