refactor(auth): decouple sandbox node from core deployment and add dedicated provisioning script

chore: Day 0 interactive setup script, documentation, and clean docker-compose OIDC defaults

feat: agent node mesh integration and UI polish

refactor the coding workspace && support larger code refactoring request