Initial deploy setup

scripts/codex_bootstrap.sh

@@ -0,0 +1,42 @@
+#!/usr/bin/env bash
+set -euo pipefail
+cd "$(dirname "$0")/.."
+
+mkdir -p local media logs backups
+if [[ ! -f .env ]]; then
+  cat > .env <<'ENV'
+DJANGO_SECRET_KEY=codex-dev-only-change-before-production-6e9fb6372d3e43cc9b74
+DJANGO_DEBUG=1
+DJANGO_ALLOWED_HOSTS=localhost,127.0.0.1,testserver
+DJANGO_CSRF_TRUSTED_ORIGINS=http://localhost:8080
+DJANGO_TIME_ZONE=Europe/Brussels
+DATABASE_URL=
+REDIS_URL=redis://localhost:6379/0
+CELERY_TASK_ALWAYS_EAGER=1
+VACATURERADAR_ADMIN_USERNAME=admin
+VACATURERADAR_ADMIN_PASSWORD=codex-local-only
+EMAIL_BACKEND=django.core.mail.backends.console.EmailBackend
+IMAP_ENABLED=0
+SOURCE_POLICY_MODE=strict
+OLLAMA_ENABLED=0
+ENV
+  chmod 600 .env
+  echo "Lokale ontwikkel-.env aangemaakt (niet voor productie)."
+fi
+
+set -a
+# shellcheck disable=SC1091
+source .env
+set +a
+
+uv sync --all-groups
+uv run python manage.py migrate --noinput
+uv run python manage.py bootstrap_instance --with-demo
+./scripts/codex_verify.sh
+
+cat <<'OUT'
+Bootstrap voltooid.
+Lokale login: admin / codex-local-only (alleen wanneer het script zelf .env heeft aangemaakt)
+Start: uv run python manage.py runserver 0.0.0.0:8080
+Lees daarna docs/ai/PROJECT_STATE.md en werk docs/ai/BACKLOG.yaml van boven naar beneden af.
+OUT