feat: add Google OAuth, remote worker system, and file browser

- Google OAuth login with JWT session cookies, per-user project isolation
- Remote worker registration via WebSocket, execute_on_worker/list_workers agent tools
- File browser UI in workflow view, file upload/download API
- Deploy script switched to local build, added tori.euphon.cloud ingress

deploy/deployment.yaml

@@ -31,6 +31,23 @@ spec:
           env:
             - name: RUST_LOG
               value: "info"
+            - name: GOOGLE_CLIENT_ID
+              valueFrom:
+                secretKeyRef:
+                  name: tori-auth
+                  key: google-client-id
+            - name: GOOGLE_CLIENT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: tori-auth
+                  key: google-client-secret
+            - name: JWT_SECRET
+              valueFrom:
+                secretKeyRef:
+                  name: tori-auth
+                  key: jwt-secret
+            - name: PUBLIC_URL
+              value: "https://tori.euphon.cloud"
       volumes:
         - name: data
           hostPath:
@@ -70,6 +87,17 @@ spec:
                 name: tori
                 port:
                   number: 80
+    - host: tori.euphon.cloud
+      http:
+        paths:
+          - path: /
+            pathType: Prefix
+            backend:
+              service:
+                name: tori
+                port:
+                  number: 80
   tls:
     - hosts:
         - tori.oci.euphon.net
+        - tori.euphon.cloud