Add encrypted per-browser API-key persistence (Supabase + invisible cookie tag, fail-safe)

Deploy app: Docker Space, session-only API keys, cloud file-upload dossier

Duplicate from streamlit/streamlit-template-space