fix: add missing env vars to CI .env heredoc

WAITLIST_MODE, LEADS_EMAIL, UMAMI_API_URL were set in GitLab CI but
never written to .env. Paddle vars made optional (:-) so deploys work
without them when in waitlist mode.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.gitlab-ci.yml

@@ -42,12 +42,15 @@ deploy:
       RESEND_API_KEY=$RESEND_API_KEY
       EMAIL_FROM=${EMAIL_FROM:-hello@notifications.padelnomics.io}
       ADMIN_EMAIL=${ADMIN_EMAIL:-}
+      LEADS_EMAIL=${LEADS_EMAIL:-}
+      UMAMI_API_URL=${UMAMI_API_URL:-}
+      WAITLIST_MODE=${WAITLIST_MODE:-false}
       RATE_LIMIT_REQUESTS=${RATE_LIMIT_REQUESTS:-100}
       RATE_LIMIT_WINDOW=${RATE_LIMIT_WINDOW:-60}
-      PADDLE_API_KEY=$PADDLE_API_KEY
-      PADDLE_WEBHOOK_SECRET=$PADDLE_WEBHOOK_SECRET
-      PADDLE_PRICE_STARTER=$PADDLE_PRICE_STARTER
-      PADDLE_PRICE_PRO=$PADDLE_PRICE_PRO
+      PADDLE_API_KEY=${PADDLE_API_KEY:-}
+      PADDLE_WEBHOOK_SECRET=${PADDLE_WEBHOOK_SECRET:-}
+      PADDLE_PRICE_STARTER=${PADDLE_PRICE_STARTER:-}
+      PADDLE_PRICE_PRO=${PADDLE_PRICE_PRO:-}
       LITESTREAM_R2_BUCKET=$LITESTREAM_R2_BUCKET
       LITESTREAM_R2_ACCESS_KEY_ID=$LITESTREAM_R2_ACCESS_KEY_ID
       LITESTREAM_R2_SECRET_ACCESS_KEY=$LITESTREAM_R2_SECRET_ACCESS_KEY

CHANGELOG.md

@@ -6,6 +6,9 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 
 ## [Unreleased]
 
+### Fixed
+- CI: add missing env vars to `.env` heredoc — `WAITLIST_MODE`, `LEADS_EMAIL`, `UMAMI_API_URL`; make Paddle vars optional (`:-`) so they don't break deploys when unset
+
 ### Changed
 - Legal pages: replaced home address with virtual office address (c/o COCENTER, Koppoldstr. 1, 86551 Aichach) in all four legal templates (`imprint_de`, `imprint_en`, `privacy_de`, `privacy_en`, `terms_de`)