redesign fully scaffolded and web login works

gateway/secrets.example.yaml

@@ -0,0 +1,40 @@
+# Gateway Secrets
+# These should be mounted from k8s secrets
+
+# Authentication
+# IMPORTANT: Generate a strong random secret for production
+# Example: openssl rand -base64 32
+auth:
+  secret: "change-me-in-production-use-openssl-rand-base64-32"
+
+# LLM Provider API Keys (configure at least one)
+llm_providers:
+  anthropic_api_key: sk-ant-xxxxx
+  openai_api_key: sk-xxxxx
+  google_api_key: xxxxx
+  openrouter_api_key: sk-or-xxxxx
+
+# Telegram (optional)
+telegram:
+  bot_token: ""
+
+# Email service (optional)
+email:
+  service_key: ""
+
+# Push notification service (optional)
+push:
+  service_key: ""
+
+# Qdrant API key (optional, for hosted Qdrant)
+qdrant:
+  api_key: ""
+
+# Iceberg S3 credentials
+iceberg:
+  s3_access_key: minioadmin
+  s3_secret_key: minioadmin
+
+# Embedding API key (if using external provider)
+embedding:
+  api_key: ""