DEPLOYMENT STEPS

1) Move credentials outside the web root:
   - Create /home/kenmeyering/s3/app_config.php from secure_home_files/app_config.php
   - Fill in the real DB and AWS credentials.
   - chmod 600 /home/kenmeyering/s3/app_config.php

2) Upload all files in this package to your Apache-served app folder.
   Keep your existing S3.php in place. This package does not include S3.php.

3) In phpMyAdmin, run schema_updates.sql.

4) Your app now reads secrets from:
   /home/kenmeyering/s3/app_config.php

5) Create or keep one admin user in the users table. The admin UI can then manage all other users.

6) Pages:
   - login.php
   - showS3Dashboard.php
   - showS3Logs.php
   - admin_users.php
   - manage_sites.php

NOTES
- Site dropdowns now come from the sites table.
- If a user has allowed_sites = *, they see all active sites from the sites table.
- Timezone is now a dropdown, defaulting to America/Los_Angeles.
