v0.17.3: bug-fix maintenance pass — ingest origin exemption, FK safety, auto-search reset, deterministic ingest, WAL, config centralization, dead-code removal

- /api/ingest exempt from origin check for CLI/Bearer clients
- recreate deleted conversations on bogus conversation_id (chat + search)
- augmented auto-search emits reset:true; frontend clears first-pass text
- image uploads stored as placeholders, never text-ingested
- check_fact_conflicts requires shared subject keywords
- deterministic ingest point ids (md5 chunk hash)
- get_load() no longer crashes when rocm-smi yields no VRAM lines
- SQLite WAL + busy_timeout; timing-safe API key compares
- supervise fire-and-forget auto-ingest tasks; log missing logprobs
- centralize EMBED_URL/EMBED_MODEL/QDRANT_URL/NODE_NAME in config
- remove dead triage.py, select_node tests, is_state_changing, stray artifacts
- add regression tests + autouse global-reset conftest

routers/ingest.py

@@ -1,4 +1,6 @@
 """JarvisChat routers - /api/ingest terminal command RAG hook."""
+import hashlib
+import hmac
 import logging
 from datetime import datetime, timezone
 
@@ -20,7 +22,7 @@ def _check_api_key(request: Request):
     if not auth.startswith("Bearer "):
         raise HTTPException(status_code=401, detail="Missing Bearer token")
     token = auth[7:].strip()
-    if token != COMPLETIONS_API_KEY:
+    if not hmac.compare_digest(token.encode(), COMPLETIONS_API_KEY.encode()):
         raise HTTPException(status_code=401, detail="Invalid API key")
 
 
@@ -50,7 +52,8 @@ async def ingest_content(request: Request):
                 log.warning(f"Ingest embedding failed for chunk {i}: {embed_resp.status_code}")
                 continue
             vector = embed_resp.json()["embedding"]
-            point_id = f"ingest-{source}-{datetime.now(timezone.utc).timestamp()}-{i}"
+            chunk_hash = hashlib.md5(chunk.encode("utf-8")).hexdigest()[:12]
+            point_id = f"ingest-{source}-{chunk_hash}-{i}"
             payload = {"text": encrypt_text(chunk), "source": source, "ingest_date": datetime.now(timezone.utc).isoformat(), "type": "ingest"}
             payload.update(metadata)
             upsert_resp = await client.put(