feat: add agent API and operational analytics

DOKPLOY_DEPLOY.md

@@ -9,6 +9,15 @@ Configure only the application secrets required by the Compose file:
 - `OPENROUTER_API_KEY`
 - `WEB_DASHBOARD_TOKEN`
 
+Optional agent credentials:
+
+- `REDDIT_BOT_AGENT_READ_TOKEN` permits authenticated GET/SSE access but cannot mutate state.
+- `REDDIT_BOT_AGENT_CONTROL_TOKEN` additionally permits versioned control and sync-job operations.
+
+Use separate long random values. Neither agent token can invoke legacy send,
+session-import, account-activation, or configuration mutations. The dashboard
+token remains the administrator credential.
+
 Do not configure Reddit usernames, passwords, display servers, CDP endpoints, or remote-browser ports.
 
 ## Account activation