Unraid deployment fixes and generator improvements

- Add Next.js rewrites to proxy API calls through same origin (fixes login/media on werkout.treytartt.com)
- Fix mediaUrl() in DayCard and ExerciseRow to use relative paths in production
- Add proxyTimeout for long-running workout generation endpoints
- Add CSRF trusted origin for treytartt.com
- Split docker-compose into production (Unraid) and dev configs
- Show display_name and descriptions on workout type cards
- Generator: rules engine improvements, movement enforcement, exercise selector updates
- Add new test files for rules drift, workout research generation

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

werkout_api/settings.py

@@ -156,7 +156,7 @@ if os.environ.get("DATABASE_URL"):
     #         "APNS_USE_SANDBOX": False
     #     }
 
-    CSRF_TRUSTED_ORIGINS = ['https://*.werkout.fitness']
+    CSRF_TRUSTED_ORIGINS = ['https://*.werkout.fitness', 'https://*.treytartt.com']
     SECRET_KEY = os.environ.get("SECRET_KEY", 'secret')
 
     # Parse the DATABASE_URL env var.