fix: comprehensive security, consistency, and dead code cleanup

Security:
- Add auth + file type/size validation to upload API
- Add admin auth to /api/admin/ endpoints
- Add SSRF protection to scrape action
- Whitelist fields in PUT /api/notes/[id] to prevent mass assignment
- Protect /lab, /agents, /chat, /canvas, /notebooks routes in middleware

AI provider fixes:
- Add deepseek/openrouter to factory ProviderType (was silently falling back to ollama)
- Fix title-suggestion.service.ts to use factory instead of hardcoded OpenAI
- Fix getAIProvider→getChatProvider in memory-echo, notebook-summary, agent-executor
- Fix getAIProvider→getTagsProvider in notebook-suggestion, title-suggestions, transform-markdown

Functional bugs:
- Fix ALLOW_REGISTRATION AND→OR logic
- Fix note-editor.tsx passing stale props to useAutoTagging instead of local state
- Fix stale Note.embedding type (migrated to NoteEmbedding table)
- Remove hardcoded SQLite path from prisma.ts

Frontend:
- Add AbortController to useAutoTagging and useTitleSuggestions hooks
- Add error rollback to optimistic UI in note-inline-editor
- Remove stale closure over notebookId/language in useAutoTagging

Cleanup:
- Rename docker-compose from keepnotes→memento
- Remove unused unstable_cache import from config.ts
- Remove dead useUndoRedo hook
- Fix TagSuggestion type (add isNewLabel, reasoning)
- Remove dead AIConfig/AIProviderType types
- Fix ghost-tags unused isEmpty var and as any cast
- Fix note-editor titleSuggestions typed as any[]

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

memento-note/lib/ai/services/title-suggestion.service.ts

@@ -3,20 +3,10 @@
  * Generates intelligent title suggestions based on note content
  */
 
-import { createOpenAI } from '@ai-sdk/openai'
 import { generateText } from 'ai'
 import { LanguageDetectionService } from './language-detection.service'
-
-// Helper to get AI model for text generation
-function getTextGenerationModel() {
-  const apiKey = process.env.OPENAI_API_KEY
-  if (!apiKey) {
-    throw new Error('OPENAI_API_KEY not configured for title generation')
-  }
-
-  const openai = createOpenAI({ apiKey })
-  return openai('gpt-4o-mini')
-}
+import { getTagsProvider } from '../factory'
+import { getSystemConfig } from '@/lib/config'
 
 export interface TitleSuggestion {
   title: string
@@ -40,7 +30,9 @@ export class TitleSuggestionService {
     const { language: contentLanguage } = await this.languageDetection.detectLanguage(noteContent)
 
     try {
-      const model = getTextGenerationModel()
+      const config = await getSystemConfig()
+      const provider = getTagsProvider(config)
+      const model = provider.getModel()
 
       // System prompt - explains what to do
       const systemPrompt = `You are an expert title generator for a note-taking application.