Add whole-app password protection

.env.example

@@ -1,4 +1,6 @@
 # Never commit a real token. Export these variables in your shell.
+RESUME_AGENT_USERNAME=resume-user
+RESUME_AGENT_PASSWORD=replace-with-a-long-random-password
 RESUME_AGENT_API_KEY=replace-with-your-token
 RESUME_AGENT_BASE_URL=https://service.nokod.ir/v1
 RESUME_AGENT_MODEL=replace-with-a-model-id-from-resume-agent-models
@@ -8,4 +10,4 @@ RESUME_AGENT_LOG_LEVEL=INFO
 RESUME_AGENT_LOG_MODEL_PAYLOADS=true
 
 # Optional host port used by Docker Compose.
-RESUME_AGENT_PORT=8000
+RESUME_AGENT_PORT=8900