Document the expected config shape for first-time setup without committing secrets. Co-authored-by: Cursor <cursoragent@cursor.com>