Add editable site name and finish service image upload

User asked to remove the hardcoded "TeaBoy" branding and let admins
change the system name. Also completes the in-progress service image
upload work via App Storage.

Changes:
- New app_settings table (single row id=1) with siteNameAr/siteNameEn
- New /settings endpoints: GET (public) + PATCH (admin)
- Atomic ensureSettingsRow via INSERT ... ON CONFLICT DO NOTHING
  to avoid race conditions
- New SiteSettingsPanel tab in admin page (Arabic + English inputs)
- New useAppName hook reads settings, updates document.title, falls
  back to defaults while loading
- Login + register pages now display the dynamic site name
- Service image upload (App Storage) wired via useUpload + presigned
  GCS URL flow; admin component ServiceImageUploader
- Storage routes: /storage/uploads/request-url and /storage/objects/*
  now require auth (closes previously-open endpoints flagged by review)
- Added AppSettings/UpdateAppSettingsBody + storage schemas to
  openapi.yaml; regenerated client and zod
- Exposed UploadResponse from @workspace/object-storage-web; added
  composite:true so it can be referenced by teaboy-os tsconfig

Validation: typechecks pass for api-server and teaboy-os; settings GET
returns row; upload URL endpoint returns 401 without auth.

lib/object-storage-web/src/index.ts

@@ -1,2 +1,2 @@
 export { ObjectUploader } from "./ObjectUploader";
-export { useUpload } from "./use-upload";
+export { useUpload, type UploadResponse } from "./use-upload";

lib/object-storage-web/src/use-upload.ts

@@ -7,7 +7,7 @@ interface UploadMetadata {
   contentType: string;
 }
 
-interface UploadResponse {
+export interface UploadResponse {
   uploadURL: string;
   objectPath: string;
   metadata: UploadMetadata;