feat: demo deployment with AIUI chat, SSH key auth, Quick Start fix

- Add AIUI pre-built dist to demo/ for Portainer deployment
- Add nginx-demo.conf with Claude API proxy (envsubst for API key)
- Add docker-entrypoint.sh for runtime API key injection
- Update Dockerfile.web to include AIUI and Claude proxy
- Update docker-compose.demo.yml with ANTHROPIC_API_KEY env var
- Switch deploy script from sshpass to SSH key auth
- Fix Quick Start Goals animating before other cards (stagger 5, opacity guard)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

neode-ui/Dockerfile.web

@@ -29,12 +29,16 @@ FROM nginx:alpine
 # Copy built files to nginx
 COPY --from=builder /app/dist /usr/share/nginx/html
 
-# Copy nginx configuration
-COPY neode-ui/docker/nginx.conf /etc/nginx/nginx.conf
+# Copy AIUI pre-built dist
+COPY demo/aiui/ /usr/share/nginx/html/aiui/
+
+# Copy nginx config template and entrypoint
+COPY neode-ui/docker/nginx-demo.conf /etc/nginx/nginx.conf.template
+COPY neode-ui/docker/docker-entrypoint.sh /docker-entrypoint-custom.sh
+RUN chmod +x /docker-entrypoint-custom.sh
 
 # Expose port
 EXPOSE 80
 
-# Start nginx
-CMD ["nginx", "-g", "daemon off;"]
-
+# Substitute ANTHROPIC_API_KEY at runtime, then start nginx
+ENTRYPOINT ["/docker-entrypoint-custom.sh"]

neode-ui/docker/docker-entrypoint.sh

@@ -0,0 +1,4 @@
+#!/bin/sh
+# Substitute only ANTHROPIC_API_KEY in nginx config, leave nginx variables untouched
+envsubst '${ANTHROPIC_API_KEY}' < /etc/nginx/nginx.conf.template > /etc/nginx/nginx.conf
+exec nginx -g 'daemon off;'

neode-ui/docker/nginx-demo.conf

@@ -0,0 +1,103 @@
+worker_processes 1;
+error_log /var/log/nginx/error.log warn;
+
+events {
+    worker_connections 768;
+}
+
+http {
+    include       /etc/nginx/mime.types;
+    default_type  application/octet-stream;
+    access_log /var/log/nginx/access.log;
+    sendfile on;
+    keepalive_timeout 65;
+    gzip on;
+    gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript;
+
+    server {
+        listen 80 default_server;
+        server_name _;
+        root /usr/share/nginx/html;
+        index index.html index.htm;
+
+        # Proxy API requests to backend
+        location /rpc/v1 {
+            proxy_pass http://neode-backend:5959;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+        }
+
+        # Proxy WebSocket connections
+        location /ws {
+            proxy_pass http://neode-backend:5959;
+            proxy_http_version 1.1;
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+            proxy_read_timeout 86400;
+        }
+
+        # Proxy public assets from backend
+        location /public {
+            proxy_pass http://neode-backend:5959;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+        }
+
+        # Proxy REST API requests
+        location /rest {
+            proxy_pass http://neode-backend:5959;
+            proxy_http_version 1.1;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+        }
+
+        # Serve AIUI SPA
+        location /aiui/ {
+            alias /usr/share/nginx/html/aiui/;
+            try_files $uri $uri/ /aiui/index.html;
+
+            location ~* /aiui/assets/ {
+                expires 1y;
+                add_header Cache-Control "public, immutable";
+            }
+        }
+
+        # Proxy Claude API requests from AIUI to Anthropic
+        location /aiui/api/claude/ {
+            rewrite ^/aiui/api/claude/(.*)$ /$1 break;
+
+            proxy_pass https://api.anthropic.com;
+            proxy_ssl_server_name on;
+            proxy_set_header Host api.anthropic.com;
+            proxy_set_header x-api-key ${ANTHROPIC_API_KEY};
+            proxy_set_header anthropic-version "2023-06-01";
+            proxy_set_header Content-Type "application/json";
+
+            # SSE streaming support
+            proxy_buffering off;
+            proxy_cache off;
+            proxy_read_timeout 300s;
+            proxy_http_version 1.1;
+            proxy_set_header Connection "";
+        }
+
+        # Serve static files
+        location / {
+            try_files $uri $uri/ /index.html;
+        }
+
+        # Cache static assets
+        location ~* \.(js|css|png|jpg|jpeg|gif|ico|svg)$ {
+            expires 1y;
+            add_header Cache-Control "public, immutable";
+        }
+    }
+}

neode-ui/src/views/Home.vue

@@ -250,9 +250,9 @@
     <!-- Quick Start Goals - shown in Pro mode below the overview cards -->
     <div
       v-if="homeTab === 'dashboard' && showQuickStart"
-      class="home-card"
-      :class="{ 'home-card-animate': animateCards }"
-      style="--card-stagger: 4"
+      class="home-card transition-opacity duration-300"
+      :class="{ 'home-card-animate': animateCards, 'opacity-0 pointer-events-none': showWelcomeBlock && !animateCards }"
+      style="--card-stagger: 5"
     >
       <div class="home-card-shell">
         <div class="home-card-inner px-6 py-6">