Add comprehensive backend features and mobile UI improvements

Backend:
- Add 2FA authentication with TOTP support
- Add API keys management system
- Add audit logging for security events
- Add file upload/management system
- Add notifications system with preferences
- Add session management
- Add webhooks integration
- Add analytics endpoints
- Add export functionality
- Add password policy enforcement
- Add new database migrations for core tables

Frontend:
- Add module position system (top/bottom sidebar sections)
- Add search and notifications module configuration tabs
- Add mobile logo replacing hamburger menu
- Center page title absolutely when no tabs present
- Align sidebar footer toggles with navigation items
- Add lighter icon color in dark theme for mobile
- Add API keys management page
- Add notifications page with context
- Add admin analytics and audit logs pages

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

README.md

@@ -2,14 +2,17 @@
  
  Modern web application for service management. Built with React, FastAPI, and SQLite.
  
- ## Features
+## Features
  
- - 👥 User Management
- - 🔐 Authentication & Authorization
- - 🎨 Modern, responsive UI with dark mode
- - 🐳 Fully containerized with Docker
+ - User management (admin)
+ - Authentication (JWT) + 2FA (TOTP) + API keys
+ - Active sessions (view/revoke)
+ - Audit log + analytics (admin)
+ - In-app notifications
+ - Modern, responsive UI with theming
+ - Fully containerized with Docker
  
- ## Technology Stack
+## Technology Stack
  
  ### Frontend
  - React 19 + TypeScript
@@ -17,7 +20,7 @@
  - React Router
  - Axios
  
- ### Backend
+### Backend
  - FastAPI (Python 3.11+)
  - SQLAlchemy 2.0 (ORM)
  - SQLite (Database)
@@ -86,15 +89,20 @@
  └── scripts/             # Utility scripts
  ```
  
- ## Configuration
+## Configuration
  
- ### Environment Variables
+### Environment Variables
  
- See `.env.example` for all available configuration options.
+See `.env.example` for all available configuration options.
  
- Key variables:
+Key variables:
  - `SECRET_KEY`: JWT secret key
  - `ALLOWED_HOSTS`: CORS configuration
+
+### Persistent Data
+
+- SQLite database: `sqlite:////config/config.db` (bind-mounted via `./config:/config`)
+- Uploads: `/config/uploads` by default (can be overridden with `FILE_STORAGE_PATH`)
  
  ## Contributing