refactor(feeds)!: region-first credential env-var names

Aligns credential env-var names with the region-first feed ids (e.g.
OHGO_API_KEY -> US_OH_OHGO_API_KEY, MOBILITHEK_BAYERN_SUBSCRIPTION_ID ->
DE_BY_MOBILITHEK_SUBSCRIPTION_ID). Shared MOBILITHEK_CERT/KEY and
already-region-first keys (AT_ASFINAG_*, EE_TARKTEE_*, NO_VEGVESEN_*) unchanged.

BREAKING CHANGE: credential env-var names renamed; the single deployment's
vault secret keys are renamed by hand to match.

Author: Medformatik

.env.example

@@ -60,8 +60,8 @@ OPENCONDITIONS_FEEDS_REMOTE_ENABLED=
 # Buenos Aires road closures (cortes)
 # BA transport API registration: https://api-transporte.buenosaires.gob.ar/registro
 # CC-BY-2.5-AR (commercial OK).
-BA_CLIENT_ID=
-BA_CLIENT_SECRET=
+AR_BA_CLIENT_ID=
+AR_BA_CLIENT_SECRET=
 
 # ASFINAG events (Austria)
 # ASFINAG content portal: https://contentportal.asfinag.at/
@@ -72,99 +72,99 @@ AT_ASFINAG_PASSWORD=
 # Live Traffic NSW (New South Wales)
 # Register at Transport NSW Open Data: https://opendata.transport.nsw.gov.au/data/user/register
 # CC-BY-4.0; attribution "Transport for NSW".
-NSW_TRANSPORT_API_KEY=
+AU_NSW_LIVETRAFFIC_API_KEY=
 
 # QLDTraffic (Queensland)
 # QLDTraffic: https://www.qldtraffic.qld.gov.au/
 # Optional — the bundled public key is shared + rate-limited (100 req/min). Set your own to avoid 429s.
-QLD_TRAFFIC_API_KEY=
+AU_QLD_TRAFFIC_API_KEY=
 
 # LVZ.NRW (Nordrhein-Westfalen) via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
 MOBILITHEK_CERT=
 MOBILITHEK_KEY=
-MOBILITHEK_NRW_SUBSCRIPTION_ID=
+DE_NW_VERKEHR_SUBSCRIPTION_ID=
 
 # NRW municipalities (Düsseldorf, Köln, Kreis Unna) via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_NRW_KOMMUNAL_SUBSCRIPTION_ID=
+DE_NW_MOBILITHEK_KOMMUNAL_SUBSCRIPTION_ID=
 
 # NRW.Mobidrom bundled roadworks via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_NRW_MOBIDROM_SUBSCRIPTION_ID=
+DE_NW_MOBILITHEK_MOBIDROM_SUBSCRIPTION_ID=
 
 # Bayern via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_BAYERN_SUBSCRIPTION_ID=
+DE_BY_MOBILITHEK_SUBSCRIPTION_ID=
 
 # Baden-Württemberg via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_BW_SUBSCRIPTION_ID=
+DE_BW_MOBILITHEK_SUBSCRIPTION_ID=
 
 # Berlin via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_BERLIN_SUBSCRIPTION_ID=
+DE_BE_MOBILITHEK_SUBSCRIPTION_ID=
 
 # Brandenburg via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_BRANDENBURG_SUBSCRIPTION_ID=
+DE_BB_MOBILITHEK_SUBSCRIPTION_ID=
 
 # Bremen via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_BREMEN_SUBSCRIPTION_ID=
+DE_HB_MOBILITHEK_SUBSCRIPTION_ID=
 
 # Hamburg via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_HAMBURG_SUBSCRIPTION_ID=
+DE_HH_MOBILITHEK_SUBSCRIPTION_ID=
 
 # Hessen via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_HESSEN_SUBSCRIPTION_ID=
+DE_HE_MOBILITHEK_SUBSCRIPTION_ID=
 
 # Mecklenburg-Vorpommern via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_MV_SUBSCRIPTION_ID=
+DE_MV_MOBILITHEK_SUBSCRIPTION_ID=
 
 # Niedersachsen via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_NIEDERSACHSEN_SUBSCRIPTION_ID=
+DE_NI_MOBILITHEK_SUBSCRIPTION_ID=
 
 # Sachsen via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_SACHSEN_SUBSCRIPTION_ID=
+DE_SN_MOBILITHEK_SUBSCRIPTION_ID=
 
 # Sachsen-Anhalt via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_SACHSEN_ANHALT_SUBSCRIPTION_ID=
+DE_ST_MOBILITHEK_SUBSCRIPTION_ID=
 
 # Schleswig-Holstein via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_SH_SUBSCRIPTION_ID=
+DE_SH_MOBILITHEK_SUBSCRIPTION_ID=
 
 # Thüringen via Mobilithek
 # Mobilithek registration: https://mobilithek.info/registration-request
 # This ONE certificate authenticates every German region feed — set it once, then add each region's subscription id. (The NRW state network is published under 'LVZ.NRW', not 'Straßen.NRW'.)
-MOBILITHEK_THUERINGEN_SUBSCRIPTION_ID=
+DE_TH_MOBILITHEK_SUBSCRIPTION_ID=
 
 # Vejdirektoratet (Denmark)
 # Danish data exchanger — dataset 416: https://du-portal-ui.dataudveksler.app.vd.dk/data/416/overview
 # CC-BY-4.0; attribution "Vejdirektoratet." Access is via a service account, not a plain API key — confirm from the dataset page whether its credential is a header/query token or an OAuth2 client-credentials pair.
-DK_VD_API_KEY=
+DK_VEJDIREKTORATET_API_KEY=
 
 # Tark Tee (Estonia)
 # Register at Tark Tee: https://tarktee.transpordiamet.ee/#/en/datex-registration
@@ -174,13 +174,13 @@ EE_TARKTEE_API_KEY=
 # National Highways NTIS (England)
 # National Highways developer portal: https://developer.data.nationalhighways.co.uk/signin
 # OGL-UK-3.0; attribution "Contains National Highways data © Crown copyright and database right."
-NH_API_KEY=
+GB_NATIONALHIGHWAYS_API_KEY=
 
 # Hrvatske ceste roadworks (Croatia)
 # Hrvatske ceste: https://www.hrvatske-ceste.hr/
 # Open licence (commercial OK); access is gated on the B2B account.
-HC_HR_USERNAME=
-HC_HR_PASSWORD=
+HR_HC_USERNAME=
+HR_HC_PASSWORD=
 
 # Statens vegvesen (Norway)
 # Statens vegvesen — get DATEX access: https://www.vegvesen.no/en/fag/technology/open-data/a-selection-of-open-data/what-is-datex/get-access/
@@ -191,25 +191,25 @@ NO_VEGVESEN_PASSWORD=
 # Trafikverket (Sweden)
 # Sign up at Trafikverket: https://data.trafikverket.se/oauth2/Account/register
 # CC0 — no restrictions. API endpoint: api.trafikinfo.trafikverket.se/v2/data.json (the bare host has no web page).
-TRAFIKVERKET_API_KEY=
+SE_TRAFIKVERKET_API_KEY=
 
 # LTA DataMall Traffic Incidents (Singapore)
 # Request LTA API access: https://datamall.lta.gov.sg/content/datamall/en/request-for-api.html
 # Singapore ODL (commercial OK); attribution to the Land Transport Authority.
-LTA_ACCOUNT_KEY=
+SG_LTA_ACCOUNT_KEY=
 
 # NAP Slovenia (promet.si)
 # Register at NAP Slovenia: https://www.nap.si/en/registration
 # CC-BY-SA (ShareAlike). The B2B host (b2b.ncup.si) is credential-gated; the NAP account is sent as HTTP Basic — confirm the exact scheme when granted.
-NAP_SI_USERNAME=
-NAP_SI_PASSWORD=
+SI_NAP_USERNAME=
+SI_NAP_PASSWORD=
 
 # 511NY (New York)
 # Create a 511NY account: https://511ny.org/my511/register
 # Attribution required: "Powered by 511NY".
-NY_511_API_KEY=
+US_NY_511_API_KEY=
 
 # OHGO travel delays (Ohio)
 # OHGO developer registration: https://ohgo.com/developer
 # Free key. Data is U.S. government public domain.
-OHGO_API_KEY=
+US_OH_OHGO_API_KEY=