lazyflat: combined alert + apply behind authenticated web UI

Three isolated services (alert scraper, apply HTTP worker, web UI+DB)
with argon2 auth, signed cookies, CSRF, rate-limited login, kill switch,
apply circuit breaker, audit log, and strict CSP.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

apply/requirements.txt

@@ -0,0 +1,26 @@
+CacheControl==0.14.4
+certifi==2026.1.4
+charset-normalizer==3.4.4
+dotenv==0.9.9
+greenlet==3.3.1
+idna==3.11
+lxml==6.0.2
+lxml_html_clean==0.4.3
+markdown-it-py==4.0.0
+mdurl==0.1.2
+msgpack==1.1.2
+fastapi==0.115.5
+pillow==12.1.0
+playwright==1.58.0
+pyee==13.0.0
+uvicorn[standard]==0.32.1
+Pygments==2.19.2
+python-dotenv==1.2.1
+pywebcopy==7.1
+reportlab==4.4.9
+requests==2.32.5
+rich==14.3.1
+setuptools==80.10.2
+six==1.17.0
+typing_extensions==4.15.0
+urllib3==2.6.3