feat: add api key auth, devii agent, openai gateway, and admin service management

This commit introduces a comprehensive set of new features including API key authentication with CLI management commands (get, reset, backfill), a Devii agentic assistant with WebSocket terminal and session bootstrap, an OpenAI-compatible LLM gateway service, and an admin service management panel. It also adds Playwright browser automation for bot support, configures internal gateway URLs, refactors content editing/deletion to support JSON API responses, and updates documentation across AGENTS.md, README.md, and the developer docs site.

devplacepy/push.py

@@ -1,6 +1,7 @@
 # retoor <retoor@molodetz.nl>
 
 import base64
+import fcntl
 import json
 import logging
 import os
@@ -77,9 +78,17 @@ def generate_public_key() -> None:
 
 
 def ensure_certificates() -> None:
-    generate_private_key()
-    generate_pkcs8_private_key()
-    generate_public_key()
+    if VAPID_PRIVATE_KEY_FILE.exists() and VAPID_PRIVATE_KEY_PKCS8_FILE.exists() and VAPID_PUBLIC_KEY_FILE.exists():
+        return
+    lock_path = VAPID_PRIVATE_KEY_FILE.parent / ".vapid.lock"
+    with open(lock_path, "w") as lock:
+        fcntl.flock(lock, fcntl.LOCK_EX)
+        try:
+            generate_private_key()
+            generate_pkcs8_private_key()
+            generate_public_key()
+        finally:
+            fcntl.flock(lock, fcntl.LOCK_UN)
 
 
 def hkdf(input_key: bytes, salt: bytes, info: bytes, length: int) -> bytes: