Make AccessForge configuration portable and fail closed

[mycomind4-arch]

Summary

• replace Illinois/ICJIA production defaults with environment-driven AccessForge configuration
• keep authentication disabled by default, but fail closed on missing/invalid allowed domains when enabled
• disable URL auditing until approved hosts are explicitly configured
• require SMTP credentials and a verified sender for production OTP authentication
• make publication imports, CLI naming, process naming, metadata, standards copy, and deployment examples portable
• preserve upstream attribution and historical release notes

Security behavior

• AUTH_REQUIRE_LOGIN=true requires ALLOWED_DOMAINS, JWT_SECRET, SMTP credentials, and SMTP_FROM
• empty/invalid ALLOWED_DOMAINS matches no email addresses
• empty ANALYZE_URL_ALLOWED_HOSTS blocks URL audits; private/reserved-IP checks remain unconditional
• PUBLIST_GRAPHQL_ENDPOINT is optional unless the publist CLI command is used

Verification

• CI: lint, typecheck, production build, qpdf setup, and full test suite — passed
• Container: image build, process startup, API health, and web response smoke test — passed