feat: ship phase 1 surface area (v0.2.0)

- primora CLI + @primora/mcp server over generated client
- auth users admin panel, mobile bottom nav
- release workflow: GHCR images, compiled binaries, npm tarballs
- fix gzip Content-Length truncation, nginx upstream re-resolution

Authored By: TDvorak <[email protected]>

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

.env.example

@@ -23,6 +23,8 @@ AUTH_BASE_URL=http://localhost/auth
 AUTH_INTERNAL_BASE_URL=http://auth:3001
 BETTER_AUTH_SECRET=change-me-super-long-better-auth-secret
 BETTER_AUTH_URL=http://localhost/auth
+# Comma-separated emails promoted to auth admin on boot (Authentication → Users panel)
+AUTH_ADMIN_EMAILS=
 COOKIE_DOMAIN=localhost
 
 FRONTEND_PORT=3000