feat(media): introduce MediaRouter and stubs for image and speech generation

fix: update endpoint URLs to reflect new app naming conventions

feat: add OpenAPI docs and opt-in bearer auth via env-var secret