Add one-click install script with automatic secret generation

- Create scripts/install.sh that auto-generates Ed25519 signing key,
  JWT secret, Postgres and MinIO passwords from .env.example placeholders
- Add startup validation in server to reject placeholder secrets
- Add 401 interceptor in console API client to clear stale JWT tokens
- Update README Quick Start to use ./scripts/install.sh
- Update .env.example with GENERATE_ME placeholders for all secrets

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

packages/console/src/lib/api.ts

@@ -64,6 +64,14 @@ async function request<T>(
   });
 
   if (!response.ok) {
+    // On 401, clear stored tokens and redirect to login
+    if (response.status === 401 && typeof window !== 'undefined') {
+      localStorage.removeItem('elydora_token');
+      localStorage.removeItem('elydora_display_name');
+      localStorage.removeItem('elydora_email');
+      window.location.href = '/login';
+    }
+
     let errorBody: ErrorResponse | null = null;
     try {
       errorBody = await response.json() as ErrorResponse;