feat: unify model catalogue and self-hosted routing

fix: update endpoint URLs to reflect new app naming conventions

feat: add OpenAPI docs and opt-in bearer auth via env-var secret

feat: add Modal model-serving layer, one app per provider