[FIX] server.js: use process.env.PORT (Heroku) or 3000 (dev)