feat: add remote workspaces and verified deliverables

deploy/docker-compose.yml

@@ -12,6 +12,8 @@ services:
     environment:
       WEBUI_URL: ${WEBUI_URL:-https://agent.k1412.top}
       WEBUI_NAME: K1412 Agent
+      K1412_REMOVE_UPSTREAM_BRANDING: ${K1412_REMOVE_UPSTREAM_BRANDING:-false}
+      WEBUI_FAVICON_URL: /static/favicon.png
       CORS_ALLOW_ORIGIN: ${CORS_ALLOW_ORIGIN:-https://agent.k1412.top}
       WEBUI_AUTH: "true"
       WEBUI_SECRET_KEY: ${WEBUI_SECRET_KEY:?WEBUI_SECRET_KEY is required}
@@ -29,6 +31,8 @@ services:
       ENABLE_FORWARD_USER_INFO_HEADERS: "true"
       FORWARD_USER_INFO_HEADER_JWT_SECRET: ${OPENWEBUI_FORWARD_JWT_SECRET:?OPENWEBUI_FORWARD_JWT_SECRET is required}
       FORWARD_USER_INFO_HEADER_JWT_EXPIRES_SECONDS: "300"
+      K1412_GATEWAY_URL: http://gateway:8001
+      K1412_GATEWAY_KEY: ${INTERNAL_GATEWAY_KEY:?INTERNAL_GATEWAY_KEY is required}
       OPENAI_API_BASE_URL: http://runtime:8000/v1
       OPENAI_API_KEY: ${INTERNAL_PROVIDER_KEY:?INTERNAL_PROVIDER_KEY is required}
       DEFAULT_MODELS: chat-medium
@@ -151,6 +155,7 @@ services:
       WORKSPACE_CPU_LIMIT: ${WORKSPACE_CPU_LIMIT:-2}
       WORKSPACE_PIDS_LIMIT: ${WORKSPACE_PIDS_LIMIT:-512}
       WORKSPACE_SSH_HOST: ${WORKSPACE_SSH_HOST:-}
+      WORKSPACE_DOWNLOAD_MAX_BYTES: ${WORKSPACE_DOWNLOAD_MAX_BYTES:-134217728}
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock
     networks: