feat: SSO 쿠키 인증 통합 + 서브도메인 라우팅 아키텍처

- Path-based 라우팅을 서브도메인 기반으로 전환
  (tkfb/tkreport/tkqc.technicalkorea.net)
- 3개 시스템 프론트엔드에 SSO 쿠키 인증 통합
  (domain=.technicalkorea.net, localStorage 폴백)
- Gateway: 포털+로그인+System1 프록시, 쿠키 SSO 설정
- System 1: 토큰키 통일, nginx.conf 생성, 신고페이지 리다이렉트
- System 2: api-base.js/app-init.js 생성, getSSOToken() 통합
- System 3: TokenManager 쿠키 지원, 중앙 로그인 리다이렉트
- docker-compose.yml에 cloudflared 서비스 추가
- DEPLOY-GUIDE.md 배포 가이드 작성

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

gateway/nginx.conf

@@ -4,18 +4,20 @@ server {
 
     client_max_body_size 50M;
 
-    # ===== 포털/SSO 페이지 =====
+    # ===== Gateway 자체 페이지 (포털, 로그인) =====
     root /usr/share/nginx/html;
 
+    # 포털 메인 페이지 (정확히 / 만)
     location = / {
         try_files /portal.html =404;
     }
 
+    # 로그인 페이지
     location = /login {
         try_files /login.html =404;
     }
 
-    # 공유 JS/CSS
+    # 공유 JS/CSS (nav-header 등)
     location /shared/ {
         alias /usr/share/nginx/html/shared/;
     }
@@ -29,59 +31,36 @@ server {
         proxy_set_header X-Forwarded-Proto $scheme;
     }
 
-    # ===== System 1: 공장관리 =====
-    location /factory/ {
-        proxy_pass http://system1-web:80/;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-
-    location /factory/api/ {
+    # ===== System 1 API 프록시 =====
+    location /api/ {
         proxy_pass http://system1-api:3005/api/;
+        proxy_http_version 1.1;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
     }
 
-    location /factory/fastapi/ {
+    # ===== System 1 업로드 파일 =====
+    location /uploads/ {
+        proxy_pass http://system1-api:3005/uploads/;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+    }
+
+    # ===== System 1 FastAPI Bridge =====
+    location /fastapi/ {
         proxy_pass http://system1-fastapi:8000/;
+        proxy_http_version 1.1;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
     }
 
-    # ===== System 2: 신고 =====
-    location /report/ {
-        proxy_pass http://system2-web:80/;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-
-    location /report/api/ {
-        proxy_pass http://system2-api:3005/api/;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-
-    # ===== System 3: 부적합관리 =====
-    location /nc/ {
-        proxy_pass http://system3-web:80/;
-        proxy_set_header Host $host;
-        proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-        proxy_set_header X-Forwarded-Proto $scheme;
-    }
-
-    location /nc/api/ {
-        proxy_pass http://system3-api:8000/api/;
+    # ===== System 1 Web (나머지 모든 경로) =====
+    location / {
+        proxy_pass http://system1-web:80;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;