Tracer links (#174)

* initial commit

* format links right

jobops.dakheera47.com/cv/shaheer-google-de

* don't support legacy

* remove phishing look

* smaller links

* readiness check in settings

* rework UX

* right col

* pop a modal

* modal improvements

* show links

* documentation disclaimer

* fix(tracer-links): preserve descriptive resume link labels

* fix(tracer-links): classify bot user agents before browser families

* fix(tracer-links): reject non-http redirect destinations

* fix(tracer-redirect): disable caching for tracked redirects

* fix(origin): prefer canonical public base url over forwarded headers

* fix(auth): protect tracer analytics routes behind basic auth

* fix(ui): rename misleading tracer drilldown human metric

* style(tests): format tracer-links invalid-destination assertion

* fix(tests): prevent mocked fs from breaking sqlite data-dir resolution

* style(docs): format versioned docs json for biome

* fix(tests): mock tracer-links in pdf skills validation suite

.env.example

@@ -19,6 +19,11 @@ RXRESUME_PASSWORD=your_password_here
 BASIC_AUTH_USER=
 BASIC_AUTH_PASSWORD=
 
+# Public base URL used to generate tracer links when PDFs are created by
+# background/pipeline runs (where request host cannot be inferred).
+# Example: JOBOPS_PUBLIC_BASE_URL=https://jobops.example.com
+JOBOPS_PUBLIC_BASE_URL=
+
 # =============================================================================
 # Gmail OAuth (Tracking Inbox) - optional
 # =============================================================================