SuperAdmin QoL: persistent session, TOTP session, shared provider keys.

Add mandatory SuperAdmin TOTP enrollment and production delivery skills.

Implement Enterprise Worth Roadmap (R-139–R-173).

feat: Phases 1-5 production improvements + 8 bug fixes

Fix: Make TOTP optional when not configured — prevents locking out existing SuperAdmins

Production hardening: JWT blacklist, TOTP, Pydantic schemas, Prometheus, SSRF fix, CSP, Redis auth, Celery backup — 35 items across P0-P5

Enforce strict SuperAdmin vs Author panel separation.

Fix chat session init crash and improve embed reliability

CRITICAL: safe rollback in get_db - session.rollback() was masking HTTPException(401) when no transaction active, causing bare 500 responses

CRITICAL FIX: use HTTPException(401) instead of custom InvalidTokenError in get_current_user - FastAPI handles HTTPException natively in dependency injection, custom exceptions were escaping to bare 500

Fix SuperAdmin 500 errors: harden get_current_user against null/undefined/expired tokens, return 401 instead of 500; harden SuperAdmin apiGet/apiPost with defensive JSON parsing and 401/403 redirect to login; fix grant_access serialization

Feat: auto-seed superadmin from SUPER_ADMIN_USER/SUPER_ADMIN_PASS env vars on startup

Restructure project for HF Spaces deployment