fix(gateway)!: replace token cookies with revocable sessions and harden abuse controls

- Replace user:token cookies with opaque server-side sessions, revocable on logout, delete, recreate and expiry; bind every credential to the path user and add cross-user regression tests.
- Rate-limit /users and /login, add optional signup invite codes and form same-origin checks, and unify login failures to 401.
- Require explicit ALLOW_INSECURE_COOKIES for plain HTTP, use __Host-dsh_gw_session when secure, and fix secure cookie deletion.
- Strip client-supplied forwarding/SSO headers, add an optional upstream allowlist, per-user in-flight and WebSocket message caps, credential-free handshake errors, and sweep-time state pruning.
- Digest-pin base images, hash-pin gateway dependencies, verify DSH_COMMIT in the build, and run the gateway image as non-root with a pinned Python base.
- Update manifests, production checklist, architecture/security docs and add an SSO preflight script.

BREAKING CHANGE: existing dsh_gw_session=<user>:<token> cookies are invalid; users must sign in again. Unknown users on POST /login now return 401 instead of 404, and the gateway refuses COOKIE_SECURE=false unless ALLOW_INSECURE_COOKIES=1.

.env.sample

@@ -23,6 +23,9 @@ CEREBRAS_API_KEY=
 AI_GATEWAY_API_KEY=
 HF_TOKEN=
 DSH_VERSION=dsh-v0.2.1-rc.5
+# Full upstream commit SHA that DSH_VERSION resolves to; the main image build
+# fails if the clone's HEAD differs (guards against a moved tag).
+DSH_COMMIT=b830ec950faba0a46dda564be3e2d854afed94f1
 RELEASE_REVISION=
 PNPM_VERSION=11.28.5
 # Container port, and the host port published by "make run".