feat: add nanoclaude service and update ai/jellyfin routes

- add nanoclaude service (EXAONE -> Gemma pipeline) on 127.0.0.1:8100
- ai.hyungi.net: split into /webhook/* -> nanoclaude and default -> gpu-hub-api
- jellyfin: switch upstream from LAN 192.168.1.122 to Tailscale 100.76.254.116

caddy/Caddyfile

@@ -42,16 +42,23 @@
 # AI Gateway — authenticated external access
 # ============================================================
 ai.hyungi.net {
-    reverse_proxy gpu-hub-api:8000 {
-        flush_interval -1
+    # 2026-04-24: /webhook/* → nanoclaude (Synology Chat 봇 outgoing URL)
+    handle /webhook/* {
+        reverse_proxy nanoclaude:8100
+    }
+    # 나머지 = OpenAI-compat API → gpu-hub-api
+    handle {
+        reverse_proxy gpu-hub-api:8000 {
+            flush_interval -1
+        }
     }
 }
 
 # ============================================================
-# Jellyfin — Mac mini (192.168.1.122)
+# Jellyfin — Mac mini (Tailscale 100.76.254.116)
 # ============================================================
 jellyfin.hyungi.net {
-    reverse_proxy 192.168.1.122:8096 {
+    reverse_proxy 100.76.254.116:8096 {
         transport http {
             read_timeout 300s
             write_timeout 300s

docker-compose.yml

@@ -97,6 +97,33 @@ services:
     networks:
       - gateway-net
 
+  # ============================================================
+  # NanoClaude — AI Assistant (EXAONE → Gemma pipeline)
+  # ============================================================
+  nanoclaude:
+    build:
+      context: ../gpu-services
+      dockerfile: nanoclaude/Dockerfile
+    container_name: nanoclaude
+    ports:
+      - "127.0.0.1:8100:8100"
+    restart: unless-stopped
+    env_file:
+      - .env.nanoclaude
+    volumes:
+      - nanoclaude_data:/app/data
+      - /home/hyungi/.ssh/nanoclaude:/root/.ssh:ro
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    healthcheck:
+      test: ["CMD", "curl", "-f", "http://localhost:8100/health"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+    networks:
+      - gateway-net
+
   searxng:
     image: searxng/searxng@sha256:34d13094b1150bba739e16c95b7334040a524aadb557fbdbc41a42827aae5f8b
     container_name: searxng
@@ -124,6 +151,7 @@ volumes:
   caddy_data:
   caddy_config:
   hub_data:
+  nanoclaude_data:
 
 networks:
   gateway-net: