security: move hardcoded passwords to .env, fix file permissions

- Move ROA_API_PASSWORD and ORACLE_PASSWORD to .env
- Update process_bon.py to use python-dotenv
- chmod 600 on .env and credentials/*
- Install python-dotenv dependency

dashboard/tasks.json

@@ -1,5 +1,5 @@
 {
-  "lastUpdated": "2026-02-03T06:31:08.743257Z",
+  "lastUpdated": "2026-02-03T21:02:31.415016Z",
   "columns": [
     {
       "id": "backlog",
@@ -268,6 +268,20 @@
           "description": "",
           "created": "2026-02-03T06:31:08Z",
           "priority": "medium"
+        },
+        {
+          "id": "task-039",
+          "title": "Raport seară 3 feb trimis pe email",
+          "description": "",
+          "created": "2026-02-03T18:01:12Z",
+          "priority": "medium"
+        },
+        {
+          "id": "task-040",
+          "title": "Job night-execute: 2 video-uri YouTube procesate",
+          "description": "",
+          "created": "2026-02-03T21:02:31Z",
+          "priority": "medium"
         }
       ]
     }