fix(setup): doctor skips placeholder secrets when seeding; reset names its target

- checks: the missing-file autofix copied shared keys from apps/sim/.env whenever truthy, including .env.example placeholders — doctor --fix could seed unusable secrets into realtime/db env files. Skip placeholders, matching autofixForMissing.
- lifecycle: reset now names the exact install (k8s context / compose file / dev containers) in its confirm, so a destructive reset can't silently hit the wrong same-named install after a context switch (down already names the context).

Author: TheodoreSpeaks

scripts/setup/checks.ts

@@ -128,7 +128,9 @@ function checkFiles(ctx: CheckContext): Finding[] {
             const values: Record<string, string> = {}
             for (const key of keys) {
               const value = ctx.env.sim.vars.get(key)
-              if (value) values[key] = value
+              // Skip placeholders so seeding never copies an .env.example stub
+              // into the new file (matches autofixForMissing).
+              if (value && !isPlaceholder(value)) values[key] = value
             }
             writeEnvValues(target, values)
           }

scripts/setup/lifecycle.ts

@@ -282,9 +282,13 @@ async function down(install: Install): Promise<void> {
 }
 
 async function reset(install: Install | null): Promise<void> {
+  // Name the exact target: k8s acts on the ambient context, so spelling out which
+  // cluster (or compose file / dev containers) is about to be wiped keeps a reset
+  // from silently hitting the wrong same-named install after a context switch.
+  const target = install ? ` ${describeInstall(install)} will be removed.` : ''
   const ok = await p.confirm({
     message: theme.error(
-      'Reset archives your .env files and wipes managed data (volumes). Continue?'
+      `Reset archives your .env files and wipes managed data (volumes).${target} Continue?`
     ),
     initialValue: false,
   })