0.2.64 update

.env.example

@@ -47,10 +47,10 @@ MEMBY_REMOTE_CONFIG_JSON=
 #   openssl rand -hex 32
 MEMBY_ADMIN_TOKEN=4fad67d508558efee5cc5ae05694105421d4c79d35ee2333a817b3791235cd8c
 
-# Public gateway address and a dedicated token used only by the Gitea release workflow.
-# Generate the token with: openssl rand -hex 32
+# Public gateway address. Release publishing uses the file-backed secret in
+# MEMBY_SECRETS_DIR, never a value in this environment file.
 MEMBY_PUBLIC_URL=https://mserver.sublogue.com
-MEMBY_RELEASE_PUBLISH_TOKEN=4b0a891382f056d6ab2ddb43ad08fbbadda0a5a7db9371c7d90fd57b38d083d2
+MEMBY_SECRETS_DIR=/share/Docker/Memby-secrets
 
 # Library import. Hourly incremental keeps up with episodes added through the day.
 MEMBY_SYNC_INTERVAL=1h
@@ -117,6 +117,26 @@ MEMBY_TRACEARR_API_KEY=trr_pub_WKSdiZFGZ_10d-zgQ2Wx0H4Ym4NAiIeLBSvf8a6rvZ0
 MEMBY_TRACEARR_SERVER_ID=6964b9ed-3a21-4f51-b94b-cd344ec42c1b
 MEMBY_TRACEARR_SYNC_INTERVAL=5m
 MEMBY_TRACEARR_FULL_INTERVAL=24h
+
+# Credits detection: where an episode's closing credits begin, discovered for the few
+# episodes the household is actually about to watch. Tracearr is what says which those are,
+# so this never scans the library — it prepares a sliding window a few episodes ahead of
+# each viewer and stops. An episode is scanned once per media version and never again.
+#
+# It is the only thing in the gateway that reads media bytes, which is why it is off by
+# default. With ffmpeg absent it still runs, writing markers from where viewers actually
+# stopped — which on a well-watched show is the better signal anyway.
+MEMBY_CREDITS_ENABLED=true
+# Leave blank to find ffmpeg on the path, which is where the image puts it.
+MEMBY_CREDITS_FFMPEG=
+# Look-ahead for an ordinary viewer. A binge expands it, a slow viewer contracts it, and
+# MAX_PREFETCH is the ceiling nothing exceeds however fast somebody watches.
+MEMBY_CREDITS_PREFETCH_EPISODES=3
+MEMBY_CREDITS_MAX_PREFETCH=5
+# Pending candidates. Past this, low-priority speculation is discarded rather than queued:
+# a backlog of episodes nobody reached has stopped describing demand.
+MEMBY_CREDITS_QUEUE_LIMIT=20
+
 MEMBY_FOR_YOU_MIN_REBUILD_AGE=24h
 MEMBY_FOR_YOU_REFRESH_INTERVAL=24h
 MEMBY_FOR_YOU_REBUILD_HOUR=4