feat: major platform expansion — Brain service, RSS reader, iOS app, AI assistants, Firefox extension

Brain Service:
- Playwright stealth crawler replacing browserless (og:image, Readability, Reddit JSON API)
- AI classification with tag definitions and folder assignment
- YouTube video download via yt-dlp
- Karakeep migration complete (96 items)
- Taxonomy management (folders with icons/colors, tags)
- Discovery shuffle, sort options, search (Meilisearch + pgvector)
- Item tag/folder editing, card color accents

RSS Reader Service:
- Custom FastAPI reader replacing Miniflux
- Feed management (add/delete/refresh), category support
- Full article extraction via Readability
- Background content fetching for new entries
- Mark all read with confirmation
- Infinite scroll, retention cleanup (30/60 day)
- 17 feeds migrated from Miniflux

iOS App (SwiftUI):
- Native iOS 17+ app with @Observable architecture
- Cookie-based auth, configurable gateway URL
- Dashboard with custom background photo + frosted glass widgets
- Full fitness module (today/templates/goals/food library)
- AI assistant chat (fitness + brain, raw JSON state management)
- 120fps ProMotion support

AI Assistants (Gateway):
- Unified dispatcher with fitness/brain domain detection
- Fitness: natural language food logging, photo analysis, multi-item splitting
- Brain: save/append/update/delete notes, search & answer, undo support
- Madiha user gets fitness-only (brain disabled)

Firefox Extension:
- One-click save to Brain from any page
- Login with platform credentials
- Right-click context menu (save page/link/image)
- Notes field for URL saves
- Signed and published on AMO

Other:
- Reader bookmark button routes to Brain (was Karakeep)
- Fitness food library with "Add" button + add-to-meal popup
- Kindle send file size check (25MB SMTP2GO limit)
- Atelier UI as default (useAtelierShell=true)
- Mobile upload box in nav drawer

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

services/brain/docker-compose.yml

@@ -13,7 +13,7 @@ services:
       - REDIS_URL=redis://brain-redis:6379/0
       - MEILI_URL=http://brain-meili:7700
       - MEILI_MASTER_KEY=${MEILI_MASTER_KEY:-brain-meili-secure-key-2026}
-      - BROWSERLESS_URL=http://brain-browserless:3000
+      - CRAWLER_URL=http://brain-crawler:3100
       - OPENAI_API_KEY=${OPENAI_API_KEY}
       - OPENAI_MODEL=${OPENAI_MODEL:-gpt-4o-mini}
       - PORT=8200
@@ -44,7 +44,7 @@ services:
       - REDIS_URL=redis://brain-redis:6379/0
       - MEILI_URL=http://brain-meili:7700
       - MEILI_MASTER_KEY=${MEILI_MASTER_KEY:-brain-meili-secure-key-2026}
-      - BROWSERLESS_URL=http://brain-browserless:3000
+      - CRAWLER_URL=http://brain-crawler:3100
       - OPENAI_API_KEY=${OPENAI_API_KEY}
       - OPENAI_MODEL=${OPENAI_MODEL:-gpt-4o-mini}
       - TZ=${TZ:-America/Chicago}
@@ -90,14 +90,17 @@ services:
     volumes:
       - ./data/meili:/meili_data
 
-  # ── Browserless (headless Chrome for JS rendering + screenshots) ──
-  brain-browserless:
-    image: ghcr.io/browserless/chromium:latest
-    container_name: brain-browserless
+  # ── Crawler (Playwright + stealth for JS rendering + screenshots) ──
+  brain-crawler:
+    build:
+      context: ./crawler
+      dockerfile: Dockerfile
+    container_name: brain-crawler
     restart: unless-stopped
     environment:
-      - MAX_CONCURRENT_SESSIONS=3
-      - TIMEOUT=30000
+      - PORT=3100
+      - TZ=${TZ:-America/Chicago}
+    shm_size: '1gb'
 
 networks:
   pangolin: