feat: security(CORS/API key), OpenAI-compatible endpoint, Paperless hook indexing; .env support

scripts/dev_server.sh

@@ -1,6 +1,14 @@
 #!/usr/bin/env bash
 set -euo pipefail
 
+# load .env if exists
+if [ -f .env ]; then
+  set -a
+  # shellcheck disable=SC1091
+  . ./.env
+  set +a
+fi
+
 export OLLAMA_HOST=${OLLAMA_HOST:-http://localhost:11434}
 export BASE_MODEL=${BASE_MODEL:-qwen2.5:7b-instruct}
 export BOOST_MODEL=${BOOST_MODEL:-qwen2.5:14b-instruct}