Replace hardcoded username/password defaults in DatabaseConfig::new(),
PoolConfig::default(), and PostgresConfig::default() with credential-free
fallback URLs. The trading_engine postgres default now also reads from
DATABASE_URL env var before falling back.
- config/src/database.rs line 57: remove foxhunt:foxhunt_dev_password from fallback
- config/src/database.rs line 123: same for PoolConfig default
- trading_engine/src/persistence/postgres.rs line 71: read DATABASE_URL env var,
remove foxhunt:password from hardcoded default
ClickHouse config already uses empty password - no change needed.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>