收口 Rust Web 入口与 AI 写入链

- 将 3000 主入口继续收口到 mnote-web，补齐 /favicon.ico、/api/auth、session alias、AI run 等 Rust Web 路由边界。

- 更新登录页与 Convex Auth 代理，支持测试账号快速登录写入真实 Convex Auth cookie。

- 推进页面设置、Wolai 对齐、Phase 7 AI kernel/CLI-first 设计文档与相关 smoke 脚本。

- 更新 leptos-tiptap 生成资产、mnote-cli/bridge-runtime、前端依赖和 dev/prod 启动脚本。

rust/crates/mnote-web/src/routes/mod.rs

@@ -30,6 +30,7 @@ pub fn build_router(state: AppState) -> Router {
     let mut router = Router::new()
         .route("/health", get(health::health))
         .route("/", get(gateway::root_entry))
+        .route("/favicon.ico", get(gateway::favicon))
         .route("/auth", get(gateway::auth_entry).post(gateway::auth_entry))
         .route("/search", get(search::shell))
         .route(
@@ -59,10 +60,16 @@ pub fn build_router(state: AppState) -> Router {
         .route("/api/search/documents", post(search::documents))
         .route("/api/gateway/health", get(gateway::gateway_health))
         .route("/api/runtime/config", get(session::runtime_config))
+        .route("/api/auth", post(gateway::auth_api))
         .route("/api/auth/session", get(session::session))
+        .route("/api/auth/whoami", get(session::session))
+        .route("/api/auth/mnote-web-token", get(session::session))
         .route("/api/auth/session/refresh", post(session::refresh_session))
+        .route("/api/ai-agent/run", post(compat::next_ai_agent_run))
         .route("/api/documents/meta", get(documents::meta))
         .route("/api/documents/content", get(documents::content))
+        .route("/api/documents/page", get(web_shell::documents_page_compat))
+        .route("/api/documents/purge", post(documents::purge))
         .route("/api/documents/title", post(documents::title))
         .route("/api/documents/options", post(documents::options))
         .route("/api/documents/save", post(documents::save))