feat: add api key auth, devii agent, openai gateway, and admin service management

This commit introduces a comprehensive set of new features including API key authentication with CLI management commands (get, reset, backfill), a Devii agentic assistant with WebSocket terminal and session bootstrap, an OpenAI-compatible LLM gateway service, and an admin service management panel. It also adds Playwright browser automation for bot support, configures internal gateway URLs, refactors content editing/deletion to support JSON API responses, and updates documentation across AGENTS.md, README.md, and the developer docs site.

nginx/nginx.conf.template

@@ -2,13 +2,18 @@ upstream app {
     server app:10500;
 }
 
+map $http_upgrade $connection_upgrade {
+    default upgrade;
+    ''      close;
+}
+
 proxy_cache_path /var/cache/nginx levels=1:2 keys_zone=app_cache:10m max_size=${NGINX_CACHE_MAX_SIZE} inactive=60m use_temp_path=off;
 
 server {
     listen 80;
     server_name _;
 
-    client_max_body_size 20M;
+    client_max_body_size ${NGINX_MAX_BODY_SIZE};
 
     add_header X-Content-Type-Options nosniff;
     add_header X-Frame-Options DENY;
@@ -21,6 +26,15 @@ server {
     gzip_vary on;
     gzip_proxied any;
 
+    location /static/uploads/ {
+        alias /app/static/uploads/;
+        add_header X-Content-Type-Options nosniff;
+        add_header Content-Disposition attachment;
+        add_header Cache-Control "public, max-age=604800";
+        access_log off;
+        log_not_found off;
+    }
+
     location /static/ {
         alias /app/static/;
         expires 7d;
@@ -29,6 +43,19 @@ server {
         log_not_found off;
     }
 
+    location /devii/ws {
+        proxy_pass http://app;
+        proxy_http_version 1.1;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_read_timeout 3600s;
+        proxy_send_timeout 3600s;
+    }
+
     location /avatar/ {
         proxy_pass http://app;
         proxy_set_header Host $host;

nginx/start.sh

@@ -12,10 +12,11 @@ fi
 
 export NGINX_CACHE_CONFIG
 export NGINX_CACHE_MAX_SIZE="${NGINX_CACHE_MAX_SIZE:-1g}"
+export NGINX_MAX_BODY_SIZE="${NGINX_MAX_BODY_SIZE:-50m}"
 
 mkdir -p /etc/nginx/conf.d
 
-envsubst '${NGINX_CACHE_CONFIG} ${NGINX_CACHE_MAX_SIZE}' \
+envsubst '${NGINX_CACHE_CONFIG} ${NGINX_CACHE_MAX_SIZE} ${NGINX_MAX_BODY_SIZE}' \
     < /etc/nginx/templates/default.conf.template \
     > /etc/nginx/conf.d/default.conf