feat(auth): replace browser Basic Auth popup with custom Shadcn SSO AuthGateModal and .hl-input system

stacks/gateway/Caddyfile

@@ -8,7 +8,7 @@
     auto_https disable_redirects
 }
 
-# 0. 家庭统一导航总入口 Sun-Panel (https://home.961504.xyz:10443)
+# 0. 家庭统一导航总入口 HomeLab Console V3 (https://home.961504.xyz:10443)
 home.961504.xyz:10443, nav.home.961504.xyz:10443 {
     tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
     encode zstd gzip
@@ -22,12 +22,12 @@ nas.home.961504.xyz:10443, z4.home.961504.xyz:10443 {
     reverse_proxy 192.168.31.185:5055
 }
 
-# 2. 路由器 Mihomo / Clash 面板 (已开启 HTTP Basic Auth 密码锁保护: ixvii0iv / Mac mini密码)
+# 2. 路由器 Mihomo / Clash 面板 (通过 HomeLab SSO 2.0 自定义登录卡片保护)
 clash.home.961504.xyz:10443 {
     tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
     encode zstd gzip
-    basic_auth {
+    forward_auth 127.0.0.1:3002 {
-        ixvii0iv $2a$14$VaaNvgIjsCJFzXCpIxjcOerKUIdkN7GhVWAlGh3/ZZjBOADY9lg..
+        uri /api/auth/verify
     }
     reverse_proxy 192.168.31.1:9999
 }
@@ -36,8 +36,8 @@ clash.home.961504.xyz:10443 {
 router.home.961504.xyz:10443 {
     tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
     encode zstd gzip
-    basic_auth {
+    forward_auth 127.0.0.1:3002 {
-        ixvii0iv $2a$14$VaaNvgIjsCJFzXCpIxjcOerKUIdkN7GhVWAlGh3/ZZjBOADY9lg..
+        uri /api/auth/verify
     }
     reverse_proxy 192.168.31.1:80
 }
@@ -50,11 +50,12 @@ lucky.home.961504.xyz:10443 {
 }
 
 # 5. AGY 24小时云端 Web 工作台 (https://agy.home.961504.xyz:10443)
+# 使用 forward_auth 对接 HomeLab SSO 2.0 自定义登录卡片，彻底告别浏览器原生丑陋弹窗！
 agy.home.961504.xyz:10443 {
     tls /Users/ixvii0iv/homelab/stacks/gateway/certs/fullchain.pem /Users/ixvii0iv/homelab/stacks/gateway/certs/privkey.pem
     encode zstd gzip
-    basic_auth {
+    forward_auth 127.0.0.1:3002 {
-        ixvii0iv $2a$14$VaaNvgIjsCJFzXCpIxjcOerKUIdkN7GhVWAlGh3/ZZjBOADY9lg..
+        uri /api/auth/verify
     }
     reverse_proxy 127.0.0.1:7681
 }