Replace user guide with updated SkillArbitrage version; remove old guide

key_store: try both Supabase download endpoint forms for robustness

Add encrypted per-browser API-key persistence (Supabase + invisible cookie tag, fail-safe)

Clean deployment: add PDF user guide, drop desktop/dev-only files

Fix: proposal </div> render, persist dossier uploads across navigation, robust dark-mode bridge

Fix: propagate session-only API key to background worker threads (proposal/analysis generation)

Fix: disable XSRF/CORS so file uploads work behind HF proxy (403 fix)

Deploy app: Docker Space, session-only API keys, cloud file-upload dossier

initial commit

Duplicate from streamlit/streamlit-template-space