Add brewing section, plan chat, roaster learning, API tokens, Swagger docs, and full backup

Brewing:
- roasted_beans + brews tables; /beans (bean management with LLM URL
  prefill) and /brews (silhouette brewer picker across immersion/
  percolation/espresso, recipe fields, auto ratio, 0-10 rating, tasting
  notes); bean remaining weight derived from logged brew doses
- Green inventory lot form also prefills from a product URL

Navigation/UX:
- Side nav is now generated from one definition in nav.js, grouped
  Roasting / Brewing / account, consistent on every page

LLM:
- 'Ask the LLM' chat drawer on the planner (stateless /api/plan-chat)
  grounded in the plan, computed ledger, learned pace, and a new
  roaster-behavior profile aggregated from uploaded .alogs
  (/api/roaster-profile: TP lag, phase RoR, median milestone temps)
- The profile also feeds roast reviews and the planner curve's fallback
  milestone temps

API platform:
- User-generated bearer tokens (rpt_…) with account-page management;
  token requests skip CSRF; hand-authored OpenAPI 3 spec at
  /api/openapi.json rendered by self-hosted Swagger UI at /api-docs
- Full-database backup export/import (admin) + per-user data export

Co-Authored-By: Claude Fable 5 <[email protected]>

README.md

@@ -17,6 +17,25 @@ A fillable, live-computing web version of the manual coffee roast plan worksheet
   as a backup), parsed, and deep-reviewed asynchronously by the same zero-tool Pi agent
   pattern as prefill (grade, highlights, concerns, next-batch suggestions, plan-vs-actual).
   The `/roasts` page lists every actual roast and renders its curve with the plan overlaid.
+- **Brewing section** — the app is split into Roasting and Brewing workflows in the nav.
+  `/beans` manages roasted/purchased coffee (with LLM URL prefill from a roaster's product
+  page); `/brews` logs every cup against a bean with a silhouette brewer picker (immersion /
+  percolation / espresso & pressure — 13 methods), recipe fields (dose, water/yield, auto
+  ratio, grind, temp, times), a 0–10 rating, and tasting notes. Bean remaining weight is
+  derived from logged brew doses. Green inventory's lot form also prefills from a URL.
+- **Plan chat + learned roaster behavior** — an "Ask the LLM" drawer on the planner chats
+  about the open plan, grounded in the computed ledger, the learned pace profile, and a
+  roaster-behavior profile (`/api/roaster-profile`) aggregated from every uploaded .alog
+  (turning-point lag, phase RoR, median milestone temps). The same profile feeds roast
+  reviews and supplies the planner curve's fallback milestone temps.
+- **API + tokens + Swagger** — every capability (including admin) is a JSON endpoint,
+  documented by a hand-authored OpenAPI 3 spec at `/api/openapi.json` and a self-hosted
+  Swagger UI at `/api-docs`. Users generate bearer tokens (`rpt_…`) on the Account page;
+  token requests skip CSRF (header-borne credentials can't be forged cross-site).
+- **Backup** — Admin → Backup exports the entire database as one JSON file and can import
+  it back transactionally (delete-and-restore, refuses backups with no active admin, keeps
+  the importing admin's session when possible). Users can download their own data from the
+  Account page.
 - **Live ledger** — the worksheet's time-ledger math (first crack, yellow, Maillard,
   development, drop, and the four sanity-check ratios) recomputes as you type, using the
   exact same arithmetic as the paper worksheet (verified against both its worked examples).