Both must use the same value. Previously POSTGRES_PASSWORD was set to a real password near the bottom of the file while DATABASE_URL used 'change-me', making the mismatch easy to miss. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>