[Docs] README understates required env and omits CI, schedulers and webhook security setup

[grantfox-oss]

Telegram (ask questions / claim the issue here first): https://t.me/+DOylgFv1jyJlNzM0

Why this matters

README.md states Node 18+ while the Dockerfile pins node:22-alpine, and it does not document the many required env vars in .env.example (contract IDs, admin secret, score deltas), the background schedulers, or webhook secret/HMAC verification, making onboarding error-prone.

Acceptance criteria

• Align the documented Node version with the Dockerfile and engines
• Document all required env vars (cross-referencing .env.example) and which are mandatory at startup
• Describe the background jobs (indexer, default checker, webhook retry, reconciliation, cleanup, loan-due cron)
• Document how webhook HMAC signatures (x-remitlend-signature) are produced and verified

Files to touch

• README.md
• .env.example
• src/config/env.ts
• src/services/webhookService.ts

Out of scope

• Generating API reference docs
• Architecture diagrams

[delfinacorr]

Hi team! I would like to claim this issue. The current gap between the documented Node version, the hidden environment variables, and the lack of documentation around background crons and webhook security makes onboarding quite tricky.

I can systematically align and document all of this.

[Obiajulu-gif]

i will love to work on this issue

[grantfox-oss]

🦊 GrantFox — @Obiajulu-gif has been assigned to this issue as part of the Official Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #21)
2. Your PR will be reviewed by the LabsCrypt maintainers

Good luck! Track your progress on GrantFox.