Update workflows and deploy script for AI Credentials Vault and Frontend Tester

feat: integrate GitBucket Private Snippets as a secure secret vault for deployment

docs: add browser setup workflow for dev container environments

docs: add remote database inspection workflow for AI agents

docs: restructure workflow subflows and promote deployment architecture map to root tier

docs: remove hardcoded vm production credentials from documentation

docs: streamline AI agent deployment workflows and reference architecture ...

- Cross-linked .agent workflows back to the docs/deployment_reference.md main knowledge point
- Overhauled workflow instructions to specify correct rsync /tmp targets
- Added explicit shell parameter calls for automation tools

docs: add deployment reference and deploy scripts ...

- Add docs/deployment_reference.md with complete proxy architecture
- Add .agent/workflows/deploy_to_production.md and envoy_control_plane.md
- Add remote_deploy.sh for 1-click CI/CD
- Fix Nginx websocket Upgrade maps and connection closures
- Update ai-hub Dockerfile to handle proxy headers
- Update local_deployment.sh and docker-compose.yml