Configuration gap evidence

Admin UI:
- /C:/Users/moabd/OneDrive/Documents/New project/appsmith-src/app/client/src/ce/pages/AdminSettings/config/configuration.tsx
- line 41: APPSMITH_BASE_URL setting exists
- line 48: UI text says it is required for password reset and email verification links

Self-host quickstart:
- /C:/Users/moabd/OneDrive/Documents/New project/appsmith-src/deploy/docker/README.md
- lines 36-48: sample docker compose shown
- no APPSMITH_BASE_URL setting appears in the reviewed quickstart sample

Repo-wide search:
- APPSMITH_BASE_URL references found in UI and server logic
- no reviewed deployment default visibly forced the setting on by default

Interpretation:
- current protection appears operationally opt-in
