chore: production-safe settings, development values only in DDEV

settings.php now holds production values (no debug, no devIPmask,
displayErrors off, warnings logged instead of thrown, deprecation log
off, sendmail, trustedHostsPattern for the production domains,
FE.compressionLevel 0 as the CDN compresses). The development values
moved into the DDEV block of additional.php. secrets.example.php gets
the production database connection.

Composer platform: PHP 8.5.12 (the version Hetzner rolls out).
Deployer 8 as dev dependency for the deployment.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

config/system/additional.php

@@ -35,6 +35,27 @@ if (getenv('IS_DDEV_PROJECT') == 'true') {
                 'trustedHostsPattern' => '.*.*',
                 'devIPmask' => '*',
                 'displayErrors' => 1,
+                // Warnings and deprecations are exceptions locally: they are how PHP 7.4 leftovers show up
+                'exceptionalErrors' => 12290,
+            ],
+            'BE' => [
+                'debug' => true,
+            ],
+            'FE' => [
+                'debug' => true,
+            ],
+            'LOG' => [
+                'TYPO3' => [
+                    'CMS' => [
+                        'deprecations' => [
+                            'writerConfiguration' => [
+                                'notice' => [
+                                    \TYPO3\CMS\Core\Log\Writer\FileWriter::class => ['disabled' => false],
+                                ],
+                            ],
+                        ],
+                    ],
+                ],
             ],
         ]
     );