Unraid deployment fixes and generator improvements

- Add Next.js rewrites to proxy API calls through same origin (fixes login/media on werkout.treytartt.com)
- Fix mediaUrl() in DayCard and ExerciseRow to use relative paths in production
- Add proxyTimeout for long-running workout generation endpoints
- Add CSRF trusted origin for treytartt.com
- Split docker-compose into production (Unraid) and dev configs
- Show display_name and descriptions on workout type cards
- Generator: rules engine improvements, movement enforcement, exercise selector updates
- Add new test files for rules drift, workout research generation

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

werkout-frontend/components/workout/ExerciseRow.tsx

@@ -4,7 +4,10 @@ import type { SupersetExercise } from "@/lib/types";
 
 function mediaUrl(path: string): string {
   if (typeof window === "undefined") return path;
-  return `${window.location.protocol}//${window.location.hostname}:8001${path}`;
+  if (window.location.hostname === "localhost" || window.location.hostname === "127.0.0.1") {
+    return `${window.location.protocol}//${window.location.hostname}:8001${path}`;
+  }
+  return path;
 }
 
 interface ExerciseRowProps {