feat: vert auth

CLAUDE.md

@@ -265,7 +265,7 @@ VERT universal file format converter:
 - **PUB_ENV**: `production` (environment mode)
 - **PUB_DISABLE_ALL_EXTERNAL_REQUESTS**: `true` (privacy mode)
 - **VERT_SABLIER_ENABLED**: `true` (enable scale-to-zero)
-- **VERT_AUTH_USERS**: HTTP Basic Auth credentials (htpasswd format in `.env`)
+- **AUTH_USERS**: Shared HTTP Basic Auth credentials (htpasswd format in `.env`)
 
 **Usage**:
 Simply access https://vert.pivoine.art and drag/drop files to convert between formats. All processing happens in your browser using WebAssembly - no data is uploaded to the server.
@@ -392,19 +392,24 @@ docker volume inspect <volume_name>
 ## Security Configuration
 
 ### HTTP Basic Authentication
-Scrapyd is protected with HTTP Basic Auth via Traefik middleware:
-- Credentials stored in `.env` as `SCRAPY_AUTH_USERS`
+Protected services (Scrapy, VERT, Proxy dashboard) use HTTP Basic Auth via Traefik middleware:
+- **Shared credentials** stored in `.env` as `AUTH_USERS`
 - Format: `username:$apr1$hash` (Apache htpasswd format)
 - Generate new hash: `openssl passwd -apr1 'your_password'`
 - Remember to escape `$` signs with `$$` in `.env` files
 
+**Protected Services:**
+- Scrapy (scrapyd + UI)
+- VERT (file converter)
+- Traefik Proxy dashboard
+
 **To update credentials:**
 ```bash
 # Generate hash
 echo "username:$(openssl passwd -apr1 'new_password')"
 
-# Update .env
-SCRAPY_AUTH_USERS=username:$$apr1$$hash$$here
+# Update .env with shared credentials
+AUTH_USERS=username:$$apr1$$hash$$here
 
 # Sync to VPS
 rsync -avzhe ssh .env root@vps:~/Projects/docker-compose/