feat(#swarm): Add Docker Swarm deployment with AI provider configuration

- Add setup-wizard.sh for interactive configuration
- Add docker-compose.swarm.yml optimized for swarm deployment
- Make CLAUDE_API_KEY optional based on AI_PROVIDER setting
- Support multiple AI providers: Ollama, Claude API, OpenAI
- Add BETTER_AUTH_SECRET to .env.example
- Update deploy-swarm.sh to validate AI provider config
- Add comprehensive documentation (DOCKER-SWARM.md, SWARM-QUICKREF.md)

Changes:
- AI_PROVIDER env var controls which AI backend to use
- Ollama is default (no API key required)
- Claude API and OpenAI require respective API keys
- Deployment script validates based on selected provider
- Removed Authentik services from swarm compose (using external)
- Configured for upstream Traefik integration

.env.example

@@ -90,6 +90,14 @@ AUTHENTIK_PORT_HTTPS=9443
 JWT_SECRET=REPLACE_WITH_RANDOM_SECRET_MINIMUM_32_CHARS
 JWT_EXPIRATION=24h
 
+# ======================
+# BetterAuth Configuration
+# ======================
+# CRITICAL: Generate a random secret key with at least 32 characters
+# This is used by BetterAuth for session management and CSRF protection
+# Example: openssl rand -base64 32
+BETTER_AUTH_SECRET=REPLACE_WITH_RANDOM_SECRET_MINIMUM_32_CHARS
+
 # ======================
 # Encryption (Credential Security)
 # ======================
@@ -264,6 +272,30 @@ RATE_LIMIT_STORAGE=redis
 # Health endpoints (/health/*) remain unauthenticated
 ORCHESTRATOR_API_KEY=REPLACE_WITH_RANDOM_API_KEY_MINIMUM_32_CHARS
 
+# ======================
+# AI Provider Configuration
+# ======================
+# Choose the AI provider for orchestrator agents
+# Options: ollama, claude, openai
+# Default: ollama (no API key required)
+AI_PROVIDER=ollama
+
+# Ollama Configuration (when AI_PROVIDER=ollama)
+# For local Ollama: http://localhost:11434
+# For remote Ollama: http://your-ollama-server:11434
+OLLAMA_MODEL=llama3.1:latest
+
+# Claude API Configuration (when AI_PROVIDER=claude)
+# OPTIONAL: Only required if AI_PROVIDER=claude
+# Get your API key from: https://console.anthropic.com/
+# Note: Claude Max subscription users should use AI_PROVIDER=ollama instead
+# CLAUDE_API_KEY=sk-ant-...
+
+# OpenAI API Configuration (when AI_PROVIDER=openai)
+# OPTIONAL: Only required if AI_PROVIDER=openai
+# Get your API key from: https://platform.openai.com/api-keys
+# OPENAI_API_KEY=sk-...
+
 # ======================
 # Logging & Debugging
 # ======================