feat: expand companion platform, device controls, and memoir workflows

Add customer and operator login, BLE provisioning, device fleet controls, call memory, memoir generation, and refreshed family and maintenance portals. Include API contracts, migrations, firmware sources, tests, assets, and deployment documentation.

.env.example

@@ -87,12 +87,20 @@ OBJECT_STORE_SECRET_KEY=local_minio_password
 OBJECT_STORE_EXPORT_BUCKET=private-exports
 OBJECT_STORE_REGION=us-east-1
 OBJECT_STORE_SECURE=false
+FIRMWARE_DOWNLOAD_BASE_URL=http://localhost:58180
 EXPORT_DOWNLOAD_TTL=10m
 EXPORT_OBJECT_TTL=24h
 ALERT_WEBHOOK_URL=
 ALERT_WEBHOOK_SECRET=
 ALERT_WEBHOOK_TIMEOUT=5s
 CONTENT_GENERATOR=local
+# Optional self-hosted Dify workflows; use private service API keys.
+DIFY_ENABLED=false
+DIFY_BASE_URL=http://story-dify-nginx/v1
+DIFY_BRIDGE_URL=http://model-bridge:8188
+DIFY_BRIDGE_SECRET=
+DIFY_EXTRACTION_API_KEY=
+DIFY_MEMOIR_API_KEY=
 CONTENT_SAFETY_PROVIDER=local
 CONTENT_SAFETY_ENDPOINT=
 CONTENT_SAFETY_API_KEY=
@@ -102,7 +110,9 @@ CONTENT_SAFETY_TIMEOUT=5s
 ARK_BASE_URL=https://ark.cn-beijing.volces.com/api/v3
 ARK_API_KEY=
 ARK_API_KEY_FILE=
-ARK_CONTENT_MODEL=
+ARK_CONTENT_MODEL=deepseek-v4-1-flash-260910
+ARK_MEMOIR_MODEL=doubao-seed-evolving
+ARK_MEMOIR_IMAGE_MODEL=doubao-seedream-5-0-pro-260628
 ARK_REQUEST_TIMEOUT=30s
 EMBEDDING_PROVIDER=local
 ARK_EMBEDDING_MODEL=
@@ -112,6 +122,11 @@ ONBOARDING_ENABLED=false
 ONBOARDING_PAUSE_CLAIMS=false
 ONBOARDING_ACTIVATION_ENABLED=false
 ONBOARDING_SMS_LOGIN_ENABLED=false
+# Also enables the customer portal SMS login; see docs/customer-sms-login.md.
+# Exactly one SELF_SIGNUP_TENANT_IDS value enables automatic customer signup.
+# Required for first-time WeChat-authorized phone login as well as SMS signup.
+# Use the deployment's customer tenant public_id; do not select a tenant from the client.
+# Multiple/empty values allow existing SMS accounts to sign in, without default signup.
 ONBOARDING_ALLOW_LOCAL_HTTP=false
 ONBOARDING_MASTER_KEY=
 ONBOARDING_MASTER_KEY_FILE=
@@ -121,3 +136,21 @@ ONBOARDING_SELF_SIGNUP_TENANT_IDS=
 ONBOARDING_SMS_GATEWAY_URL=
 ONBOARDING_SMS_GATEWAY_TOKEN=
 ONBOARDING_SMS_GATEWAY_TOKEN_FILE=
+# Use "tencent" to send the same SaaS, management and mini-program login OTPs
+# directly through Tencent Cloud SMS. Leave as gateway for the legacy adapter.
+ONBOARDING_SMS_PROVIDER=gateway
+# 可选；API/worker 默认自动读取 /run/secrets/voice-runtime/tencent-sms.json（存在时）。
+# 单文件里的 enabled、密钥和四种模板优先于下方旧版逐项配置。
+TENCENT_SMS_CONFIG_FILE=
+# Optional server-only file for SaaS and mini-program CAPTCHA credentials.
+# Set true to temporarily disable human verification for website login/SMS only.
+ONBOARDING_SAAS_CAPTCHA_DISABLED=false
+# Defaults to /run/secrets/voice-runtime/tencent-captcha.json when present.
+TENCENT_CAPTCHA_CONFIG_FILE=
+TENCENT_SMS_SECRET_ID=
+TENCENT_SMS_SECRET_ID_FILE=
+TENCENT_SMS_SECRET_KEY=
+TENCENT_SMS_SECRET_KEY_FILE=
+TENCENT_SMS_SDK_APP_ID=
+TENCENT_SMS_SIGN_NAME=
+TENCENT_SMS_TEMPLATE_ID=