Product updates

🚀 [ADDED]

- Loader auth now sends app_name + owner_id and supports env overrides.

- Default auth base URL fallback added.

- Admin app lists now read from Postgres (primary + scoped).

- Create‑app flow mirrors new apps into Postgres in primary mode.

- Reseller panel rebuilt: new layout, key table, logs, and create‑license modal.

- Per‑key actions added (pause, unpause, delete, ban, extend, copy).

- Balance controls expanded (add/remove/set).

- Reseller duration toggles added (day/week/month/lifetime).

- Backend Postgres primary mode added with async read/write paths.

- Metrics, admin presence, auth/profile, and user management now Postgres‑backed.

- Shadow sync system added (service + timer + logs).

- Postgres/Valkey stack provisioned on backend VPS.

- Increased request body limit to 200MB.

- Default compose runtime switched to Postgres primary.

🛠️ [FIXED]

- Loader no longer hard‑fails without AUTH_SERVER_BASE_URL.

- App list mismatch resolved between SQLite/Postgres during migration.

- Manager/reseller assignment updates fixed and stale scoped accounts cleaned.

- Reseller panel nav restored and access locked to reseller‑only pages.

- Modal overflow issues fixed across reseller UI.

- Key generation normalized and capped at 50 per request.

- Scoped app filtering fixed for reseller/manager accounts.

- CSP block for ChangeCrab fixed and widget load race resolved.

- Backend Postgres runtime crashes fixed (sync client removed, env wiring corrected).

- Admin user write paths no longer depend on SQLite.

- Login/register Postgres lookup issues fixed.

- SQLite mutex/await issues resolved in admin list endpoints.

- Docker networking issues on backend VPS recovered.

- Migration quoting/command issues fixed.

- Postgres credential injection fixed in containers.

- Upload size errors resolved after raising max_request_bytes.

❌ [REMOVED]

- Old reseller card‑list inventory.

- Bulk‑only key controls in reseller panel.