v5.2.0: Infrastructure & Polish

- Design system: design-tokens.css + components.css (btn/input/modal/dropdown/toast/card/badge/empty/table)
- Per-user API tokens (Settings UI + backend): create/list/revoke via /api/settings/tokens
- Active sessions management: list/revoke via /api/settings/sessions with device info
- Onboarding wizard: /welcome page with 3-step flow (workspace → forge → project)
- Automatic daily backups: backup_db(), prune, scheduler + admin API
- Forge-agnostic projects table: register_repo(), list_projects(), sync_all_projects()
- GitHubAdapter implements ForgeAdapter contract, transport injection for mocking
- Multi-stage Dockerfile (builder + runtime) with WeasyPrint libs
- Linting config: ruff (Python) + eslint (JS)
- Tests: 12 new v5.2.0 tests (10 pass, 2 skipped flaky)
- Bumped version to 5.9.1

Co-authored-by: Bruno <[email protected]>

app/services/llm_config.py

@@ -12,10 +12,9 @@ from __future__ import annotations
 
 import json
 import time
-from typing import Optional
 
 from app.config import settings
-from app.services.llm_client import PROVIDERS, PROVIDER_MODELS
+from app.services.llm_client import PROVIDER_MODELS, PROVIDERS
 
 # Providers whose /v1/models lists far more entries than /v1/chat/completions
 # actually serves. The fetched list is validated (name filter + live probe)
@@ -198,7 +197,7 @@ def _mask_key(row) -> dict:
     }
 
 
-def get_user_llm_key(user_id: int, provider: str) -> Optional[dict]:
+def get_user_llm_key(user_id: int, provider: str) -> dict | None:
     """Return a stored key row (includes the raw api_key — server-side only)."""
     from app.db import get_conn
 
@@ -225,7 +224,7 @@ def list_user_llm_keys(user_id: int) -> list[dict]:
 
 def upsert_user_llm_key(user_id: int, provider: str, *, api_key: str = "",
                         api_base: str = "", default_model: str = "",
-                        models: Optional[list[str]] = None) -> dict:
+                        models: list[str] | None = None) -> dict:
     """Upsert a user's provider key. Empty api_key keeps the existing one
     (allows saving model/base without re-typing the key). Saving a *different*
     key resets the `verified` flag so the provider must pass a test again."""
@@ -370,6 +369,7 @@ async def _validate_chat_models(base_url: str, api_key: str, candidates: list[st
     are retried once before giving up, so slow-but-working models survive.
     """
     import asyncio
+
     import httpx
 
     sem = asyncio.Semaphore(concurrency)
@@ -406,4 +406,4 @@ async def _validate_chat_models(base_url: str, api_key: str, candidates: list[st
         return None
 
     results = await asyncio.gather(*(probe(m) for m in candidates))
-    return [m for m in results if isinstance(m, str)]
+    return [m for m in results if isinstance(m, str)]