Harden and preconfigure OpenWebUI for Subactor

[tom-sapletta-com]

Adds a reproducible Subactor/OpenWebUI boundary:

• binds MCP gateway and OpenWebUI to loopback by default
• enables OpenWebUI auth and disables signup by default
• persists session/JWT secrets from ignored external files
• forwards bounded signed user identity
• adds an idempotent, secret-safe scoped MCP connection provisioner
• documents local use and the TLS proxy boundary

Validation: compose config boundary assertions pass; provisioner syntax and live idempotent run pass; 7 repository tests pass. No secret values are tracked or logged.

Validator Agent approval is required on the exact head before merge.

[ifuri-validator-agent]

Deterministic Validator approval for exact head 2e42786819d37a3a2aeeff0b39833b1c6aaa3d6f.

Ticket: ticket-009
Correlation ID: mcp-pr-5-ticket-009-verify-20260813
Model: openrouter/z-ai/glm-5.2
Reviewed diff chunks: 1
Advisory LLM verdict: BLOCK
Advisory summary: Reviewed all 1 diff chunk(s). The provided input contains a redacted environment line (.env content). Per security constraints, environment files and secrets must not be read or processed. No trusted PR diff, logs, or test results were provided for semantic review.
Advisory findings: Input appears to contain .env/environment configuration content, which is prohibited from being read or processed.; Potential exposure or inclusion of environment/secrets data in the review input stream. This must be rejected and reported as a blocking security finding.
The LLM output above is advisory and was not used as the approval trust root.
Merge will be attempted after this approval when explicitly authorized.

Decision record (recomputable)

DECISION D-009-2435
TICKET ticket-009
HEAD_SHA 2e42786819d37a3a2aeeff0b39833b1c6aaa3d6f
CORRELATION_ID mcp-pr-5-ticket-009-verify-20260813
ACTOR agent:ifuri-validator-agent[bot]
APPLIED_RULE P-CORE-015
INPUT author_login = "tom-sapletta-com"
INPUT observed_checks = ["verify=PASS"]
INPUT required_checks = ["verify"]
INPUT required_checks_source = "env/request"
INPUT reviewer_login = "ifuri-validator-agent[bot]"
VERDICT APPROVE AUTHORITY DETERMINISTIC
REJECTED REQUEST_CHANGES BECAUSE NO_UNSAFE_CHANGE_REASON_FOUND
ADVISORY llm_verdict = "BLOCK" MODEL "openrouter/z-ai/glm-5.2"
ASSERT VERDICT_AUTHORITY != "ADVISORY"