redesign fully scaffolded and web login works

deploy/k8s/prod/configs/gateway-config.yaml

@@ -0,0 +1,64 @@
+apiVersion: v1
+kind: ConfigMap
+metadata:
+  name: gateway-config
+data:
+  config.yaml: |
+    # Gateway Configuration
+
+    # Server configuration
+    server:
+      port: 3000
+      host: 0.0.0.0
+      log_level: info
+      cors_origin: "https://app.dexorder.com"
+      base_url: https://api.dexorder.com
+      trusted_origins:
+        - https://app.dexorder.com
+        - https://api.dexorder.com
+
+    # Database
+    database:
+      url: postgresql://postgres:postgres@postgres:5432/iceberg
+
+    # Default model (if user has no preference)
+    defaults:
+      model_provider: anthropic
+      model: claude-3-5-sonnet-20241022
+
+    # Kubernetes configuration
+    kubernetes:
+      namespace: dexorder-agents
+      in_cluster: true
+      agent_image: ghcr.io/dexorder/agent:latest
+      sidecar_image: ghcr.io/dexorder/lifecycle-sidecar:latest
+      storage_class: standard
+
+    # DragonflyDB (Redis-compatible, for hot storage and session management)
+    redis:
+      url: redis://dragonfly:6379
+
+    # Qdrant (for RAG vector search)
+    qdrant:
+      url: http://qdrant:6333
+      collection: gateway_memory
+
+    # Iceberg (for durable storage via REST catalog)
+    iceberg:
+      catalog_uri: http://iceberg-catalog:8181
+      namespace: gateway
+      s3_endpoint: http://minio:9000
+
+    # Event router (ZeroMQ)
+    events:
+      router_bind: tcp://*:5571
+
+    # Embeddings (for RAG vector search)
+    embedding:
+      provider: ollama
+      model: all-minilm
+      ollama_url: http://ollama:11434
+
+    # Email service configuration
+    email:
+      from_address: noreply@dexorder.com

deploy/k8s/prod/kustomization.yaml

@@ -1,12 +1,10 @@
 apiVersion: kustomize.config.k8s.io/v1beta1
 kind: Kustomization
 
-# Note: namespaces are defined in base; workloads go to dexorder-system
-namespace: dexorder-system
-
 # Base resources (includes all security policies)
 resources:
   - ../base
+  - configs/gateway-config.yaml
 
 # Production patches
 patches:
@@ -18,13 +16,13 @@ patches:
 configMapGenerator:
   - name: relay-config
     files:
-      - config.yaml=../../configmaps/relay-config.yaml
+      - config.yaml=configs/relay-config.yaml
   - name: ingestor-config
     files:
-      - config.yaml=../../configmaps/ingestor-config.yaml
+      - config.yaml=configs/ingestor-config.yaml
   - name: flink-config
     files:
-      - config.yaml=../../configmaps/flink-config.yaml
+      - config.yaml=configs/flink-config.yaml
 
 # Secrets (managed via kubectl, not committed)
 # These are created by bin/secret-update prod

deploy/k8s/prod/patches.yaml

@@ -39,8 +39,8 @@ spec:
         image: dexorder/ai-web:latest
         imagePullPolicy: Always
         env:
-        - name: VITE_BASE_PATH
-          value: "/cryptochimp/"
+        - name: VITE_GATEWAY_URL
+          value: "https://dexorder.ai/api"
         - name: VITE_WS_URL
           value: "wss://dexorder.ai/ws"
         resources: