fix: update service token + fix API proxy routing

- Regenerated Admin API token (old one was invalidated by generate_keys)
- Traefik: separate routers for app (with Authentik) and /api/ (no auth)
- Nginx proxy: use container IP (cross-compose DNS doesn't resolve names)
- /outpost.goauthentik.io/ route for Authentik callbacks

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/api/auth.js

@@ -5,7 +5,7 @@
 // ─────────────────────────────────────────────────────────────────────────────
 import { BASE_URL } from 'src/config/erpnext'
 
-const SERVICE_TOKEN = 'b273a666c86d2d0:613842e506d13b8'
+const SERVICE_TOKEN = 'b273a666c86d2d0:06120709db5e414'
 
 export function authFetch (url, opts = {}) {
   opts.headers = { ...opts.headers, Authorization: 'token ' + SERVICE_TOKEN }

src/stores/auth.js

@@ -9,7 +9,7 @@ import { ref } from 'vue'
 import { BASE_URL } from 'src/config/erpnext'
 
 // Service token for ERPNext API — all dispatch API calls use this
-const ERP_SERVICE_TOKEN = 'b273a666c86d2d0:613842e506d13b8'
+const ERP_SERVICE_TOKEN = 'b273a666c86d2d0:06120709db5e414'
 
 export const useAuthStore = defineStore('auth', () => {
   const user    = ref(null)