feat: serve docs flat at /<repo>/ with no redirects

- collect.py copies each repo's built site contents directly to a
  top-level <repo>/ dir (was libs|apis|wiki/<repo>/site nesting)
- nginx uses `index index.html lib/index.html api/index.html` so
  /dagpipe/ -> lib/index.html, /auth-server/ -> api/index.html are
  served internally with no redirects
- _index regenerates links against the flat layout
  (/dagpipe/lib/, /auth-server/api/, /mongo-ops/, /blog/...)
- config.yml static entries point at vendored blog/ + media-manager/
- Dockerfile copies per-repo dirs flat into the nginx html root
- removed stale libs/, apis/, wiki/, tutorials/ category trees

py-jwt/mcp/modules/jwtlib.models.security.json

@@ -0,0 +1,39 @@
+{
+  "module": "jwtlib.models.security",
+  "content": {
+    "path": "jwtlib.models.security",
+    "docstring": "# Summary\n\nJWT token payload models.\n\nThis module defines typed representations of decoded `JWT` payloads used\ninternally for token validation and user resolution.",
+    "objects": {
+      "BaseModel": {
+        "name": "BaseModel",
+        "kind": "alias",
+        "path": "jwtlib.models.security.BaseModel",
+        "signature": "<bound method Alias.signature of Alias('BaseModel', 'pydantic.BaseModel')>",
+        "docstring": null
+      },
+      "TokenPayload": {
+        "name": "TokenPayload",
+        "kind": "class",
+        "path": "jwtlib.models.security.TokenPayload",
+        "signature": "<bound method Class.signature of Class('TokenPayload', 13, 38)>",
+        "docstring": "Decoded `JWT` payload.\n\nAttributes:\n    sub (str):\n        Subject claim identifying the user (typically a username or user ID).\n    exp (int):\n        Expiration time as a Unix timestamp (seconds since epoch).\n\nNotes:\n    **Responsibilities:**\n\n        - Represents the validated claims extracted from a `JWT` after\n          signature verification. This model is used internally to enforce\n          required claims and provide a typed interface to token data.\n\n    **Guarantees:**\n\n        - This model assumes the `JWT` signature has already been verified.\n          No authorization decisions should be made solely on this model.\n          Additional claims may exist but are intentionally ignored.",
+        "members": {
+          "sub": {
+            "name": "sub",
+            "kind": "attribute",
+            "path": "jwtlib.models.security.TokenPayload.sub",
+            "signature": null,
+            "docstring": null
+          },
+          "exp": {
+            "name": "exp",
+            "kind": "attribute",
+            "path": "jwtlib.models.security.TokenPayload.exp",
+            "signature": null,
+            "docstring": null
+          }
+        }
+      }
+    }
+  }
+}