This part of the package is dedicated to displaying web UI.

The deployment is done to `/var/www/html` through the `vega-web-deploy` script. The web server is Apache2.


## Security — MANDATORY

- **NEVER hardcode passwords, API keys, tokens, or secrets in code**
- All secrets MUST come from environment variables (os.environ / getenv / .env)
- Database credentials: use BULK_DHOST, BULK_DUSER, BULK_DTOKEN env vars
- API keys: use ANTHROPIC_API_KEY, OPENAI_API_KEY, etc. from env
- Telegram tokens: use TELEGRAM_*_TOKEN env vars
- Before committing: grep for hardcoded secrets (passwords, tokens, keys)
- .env files are in .gitignore — never commit them