redesign fully scaffolded and web login works

client-py/secrets.example.yaml

@@ -0,0 +1,25 @@
+# Example secrets file for DexOrder user container
+# Mount this at /app/config/secrets.yaml in k8s
+# This file should be created from k8s secrets
+
+# Iceberg catalog credentials
+iceberg:
+  s3:
+    endpoint: "http://minio:9000"
+    access_key_id: "minioadmin"
+    secret_access_key: "minioadmin"
+    region: "us-east-1"
+
+  catalog:
+    uri: "http://iceberg-rest:8181"
+    warehouse: "s3://warehouse/"
+
+# API keys for external services (if needed)
+api_keys:
+  telegram_bot_token: ""
+
+# Internal auth (for mode A - platform harness)
+auth:
+  mode: "mtls"  # or "platform_token" or "api_key"
+  # API key hash if using api_key mode
+  api_key_hash: ""