feat: unify docs portal and MCP servers into one config-driven service

- add config.yml as single source of truth for collected repos/categories
- add collect.py CLI to pull lib/api/wiki site builds and mcp bundles from
  source repos and regenerate nginx.conf + _index/index.html
- port mcp runtime (main.py/core.py/config.py): nginx + health + FastMCP
  servers started from config.yml
- docker: python:3.13-slim + nginx, expose 8000-8006 + 9000 (html portal)
- drone: publish html (6007:9000) and MCP ports 8000-8006
- move mongo-ops docs to wiki/, add auth-server (api) and hexa (lib)
- refresh lib site builds (lib/ prefix) and collect mcp bundles

libs/py-jwt/site/mcp/modules/jwtlib.models.security.json

@@ -0,0 +1,39 @@
+{
+  "module": "jwtlib.models.security",
+  "content": {
+    "path": "jwtlib.models.security",
+    "docstring": "# Summary\n\nJWT token payload models.\n\nThis module defines typed representations of decoded `JWT` payloads used\ninternally for token validation and user resolution.",
+    "objects": {
+      "BaseModel": {
+        "name": "BaseModel",
+        "kind": "alias",
+        "path": "jwtlib.models.security.BaseModel",
+        "signature": "<bound method Alias.signature of Alias('BaseModel', 'pydantic.BaseModel')>",
+        "docstring": null
+      },
+      "TokenPayload": {
+        "name": "TokenPayload",
+        "kind": "class",
+        "path": "jwtlib.models.security.TokenPayload",
+        "signature": "<bound method Class.signature of Class('TokenPayload', 13, 38)>",
+        "docstring": "Decoded `JWT` payload.\n\nAttributes:\n    sub (str):\n        Subject claim identifying the user (typically a username or user ID).\n    exp (int):\n        Expiration time as a Unix timestamp (seconds since epoch).\n\nNotes:\n    **Responsibilities:**\n\n        - Represents the validated claims extracted from a `JWT` after\n          signature verification. This model is used internally to enforce\n          required claims and provide a typed interface to token data.\n\n    **Guarantees:**\n\n        - This model assumes the `JWT` signature has already been verified.\n          No authorization decisions should be made solely on this model.\n          Additional claims may exist but are intentionally ignored.",
+        "members": {
+          "sub": {
+            "name": "sub",
+            "kind": "attribute",
+            "path": "jwtlib.models.security.TokenPayload.sub",
+            "signature": null,
+            "docstring": null
+          },
+          "exp": {
+            "name": "exp",
+            "kind": "attribute",
+            "path": "jwtlib.models.security.TokenPayload.exp",
+            "signature": null,
+            "docstring": null
+          }
+        }
+      }
+    }
+  }
+}