Add encrypted per-browser API-key persistence (Supabase + invisible cookie tag, fail-safe)

Fix: proposal </div> render, persist dossier uploads across navigation, robust dark-mode bridge

Deploy app: Docker Space, session-only API keys, cloud file-upload dossier