feat: add Google OAuth, remote worker system, and file browser

- Google OAuth login with JWT session cookies, per-user project isolation
- Remote worker registration via WebSocket, execute_on_worker/list_workers agent tools
- File browser UI in workflow view, file upload/download API
- Deploy script switched to local build, added tori.euphon.cloud ingress

scripts/deploy.sh

@@ -1,25 +1,23 @@
 #!/bin/bash
-# Deploy tori to OCI k3s cluster
-# Run from local machine: scripts/deploy.sh
+# Deploy tori to k3s cluster (local kubectl)
 set -euo pipefail
 
-OCI_HOST="oci"
-OCI_DIR="~/src/tori"
 IMAGE="registry.oci.euphon.net/tori:latest"
 
-echo "==> Syncing project to OCI..."
-rsync -az --exclude target --exclude node_modules --exclude .git --exclude web/dist . "${OCI_HOST}:${OCI_DIR}/"
+echo "==> Building Rust binary..."
+cargo build --release --target aarch64-unknown-linux-musl
 
-echo "==> Building Rust binary on OCI..."
-ssh "$OCI_HOST" "source ~/.cargo/env && cd $OCI_DIR && \
-  cargo build --release --target aarch64-unknown-linux-musl"
+echo "==> Building Docker image..."
+docker build -t "$IMAGE" .
 
-echo "==> Building and deploying on OCI..."
-ssh "$OCI_HOST" "cd $OCI_DIR && \
-  docker build -t $IMAGE . && \
-  docker push $IMAGE && \
-  kubectl apply -f deploy/ && \
-  kubectl rollout restart deployment/tori -n tori && \
-  kubectl rollout status deployment/tori -n tori"
+echo "==> Pushing image..."
+docker push "$IMAGE"
+
+echo "==> Applying manifests..."
+kubectl apply -f deploy/
+
+echo "==> Rolling out..."
+kubectl rollout restart deployment/tori -n tori
+kubectl rollout status deployment/tori -n tori
 
 echo "==> Done!"