Users, file manager, image generation, budgets and agent workflow

- User management: local accounts (Argon2) and OpenID Connect, admin/user
  roles, per-user folders plus admin-shared folders, read-only session
  sharing, event filtering per user
- File manager with CodeMirror editor and git client (status, diff,
  stage, commit, branches, fetch/pull/push, log, clone/init)
- Image generation via fal.ai: generate_image tool and image page
- Budgets: monthly limits per provider, provider balances/costs
  (OpenRouter, Anthropic admin cost report, fal.ai), price discovery
- Subagents on other models, background tasks, concurrency limits per
  host/model/subagent
- MCP tools loaded on demand (mcp_search/mcp_call), read-only hints
- Permission mode "auto", safe read-only commands always allowed
- Persistent message queue with attachments, deletable
- Live reasoning incl. <think> tags, activity animations, CSS themes,
  mobile layout, statistics per user, upload size handling
- Docker: named volume for state, localhost-bound port

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

server/src/main.rs

@@ -2,7 +2,12 @@
 
 mod api;
 mod app;
+mod auth;
+mod budget;
 mod config;
+mod files;
+mod git;
+mod images;
 mod mcp;
 mod permission;
 mod prompts;
@@ -30,9 +35,6 @@ async fn main() -> Result<()> {
     let (cfg, _) = config::load_or_init(&path)?;
     tracing::info!("config: {}", path.display());
     tracing::info!("workspace: {}", cfg.workspace().display());
-    if cfg.auth_token().is_empty() {
-        tracing::warn!("auth_token is empty – the API is unprotected. Only use this on localhost.");
-    }
     let bind = cfg.server.bind.clone();
     let app = app::App::new(path, cfg).await?;
     let router = api::router(app);