[Studio] Add configurable login protection

[Aias00]

Summary

• add configurable Studio login protection with token-backed API request checks
• authenticate against configured admin credentials when provided while keeping local-dev compatibility by default
• document Docker Compose login setup and pass auth/Prometheus env vars into deployment paths

Scope

• BASE-01 login and permission baseline
• related to 能否给个docker-compose.yml 示例,包含登录配置的 #97, Password exposure through query strings in url #154, and 怎么开启控制台网页登录？ #203

Tests

• JAVA_HOME=/Users/aias/Library/Java/JavaVirtualMachines/openjdk-21.0.2/Contents/Home mvn test
• bash -n deploy/deploy.sh
• docker compose -f deploy/docker-compose.yml --env-file deploy/.env.example config
• git diff --check

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.