Users, file manager, image generation, budgets and agent workflow

- User management: local accounts (Argon2) and OpenID Connect, admin/user
  roles, per-user folders plus admin-shared folders, read-only session
  sharing, event filtering per user
- File manager with CodeMirror editor and git client (status, diff,
  stage, commit, branches, fetch/pull/push, log, clone/init)
- Image generation via fal.ai: generate_image tool and image page
- Budgets: monthly limits per provider, provider balances/costs
  (OpenRouter, Anthropic admin cost report, fal.ai), price discovery
- Subagents on other models, background tasks, concurrency limits per
  host/model/subagent
- MCP tools loaded on demand (mcp_search/mcp_call), read-only hints
- Permission mode "auto", safe read-only commands always allowed
- Persistent message queue with attachments, deletable
- Live reasoning incl. <think> tags, activity animations, CSS themes,
  mobile layout, statistics per user, upload size handling
- Docker: named volume for state, localhost-bound port

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.env.example

@@ -1,11 +1,17 @@
-# Access token for the web UI (required). Generate one with: openssl rand -hex 32
-CODECRAFT_TOKEN=
+# Optional: create the first admin on first start. Otherwise the server logs a
+# one-time setup code and you create the admin in the web UI.
+CODECRAFT_ADMIN_USER=
+CODECRAFT_ADMIN_PASSWORD=
+
+# Single sign-on client secret (see [auth.oidc] in config.toml).
+OIDC_CLIENT_SECRET=
 
 # Directory with your projects, mounted as /workspace.
-WORKSPACE=/home/zink/Projects
+WORKSPACE=/path/to/your/projects
 
-# Host port.
+# Host port and address (127.0.0.1 = only reachable through a local reverse proxy).
 PORT=8787
+BIND_ADDR=127.0.0.1
 
 # UID/GID that owns the project files (id -u / id -g).
 UID=1000