Unraid deployment fixes and generator improvements

- Add Next.js rewrites to proxy API calls through same origin (fixes login/media on werkout.treytartt.com)
- Fix mediaUrl() in DayCard and ExerciseRow to use relative paths in production
- Add proxyTimeout for long-running workout generation endpoints
- Add CSRF trusted origin for treytartt.com
- Split docker-compose into production (Unraid) and dev configs
- Show display_name and descriptions on workout type cards
- Generator: rules engine improvements, movement enforcement, exercise selector updates
- Add new test files for rules drift, workout research generation

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

werkout-frontend/components/onboarding/WorkoutTypesStep.tsx

@@ -84,14 +84,14 @@ export function WorkoutTypesStep({
                     isSelected ? "text-accent" : "text-zinc-100"
                   }`}
                 >
-                  {wt.name}
+                  {wt.display_name || wt.name}
                 </span>
                 <Badge variant={intensityVariant[wt.typical_intensity] || "default"}>
                   {wt.typical_intensity}
                 </Badge>
               </div>
               {wt.description && (
-                <p className="text-sm text-zinc-400 line-clamp-2">
+                <p className="text-sm text-zinc-400">
                   {wt.description}
                 </p>
               )}