platform: modularize api/gui, add docs-tests-web foundation, and refresh root config

scripts/transport-packaging/systemd/transport-packaging-auto-update.env.example

@@ -0,0 +1,18 @@
+# Auto-update opt-in gate.
+ENABLED=false
+
+# Defaults match production manifest/policy in repository.
+MANIFEST=/opt/stack/adguardapp/scripts/transport-packaging/manifest.production.json
+SOURCE_POLICY=/opt/stack/adguardapp/scripts/transport-packaging/source_policy.production.json
+BIN_ROOT=/opt/selective-vpn/bin
+
+# Optional filters.
+COMPONENTS=singbox,phoenix
+TARGET=linux-amd64
+ROLLOUT_STAGE=stable
+COHORT_ID=
+SIGNATURE_MODE=
+
+# Frequency controls.
+MIN_INTERVAL_SEC=21600
+JITTER_SEC=300

scripts/transport-packaging/systemd/transport-packaging-auto-update.service

@@ -0,0 +1,23 @@
+[Unit]
+Description=Selective VPN transport packaging auto-update (opt-in)
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+EnvironmentFile=-/etc/selective-vpn/transport-packaging-auto-update.env
+ExecStart=/opt/stack/adguardapp/scripts/transport-packaging/auto_update.sh \
+  --enabled ${ENABLED:-false} \
+  --manifest ${MANIFEST:-/opt/stack/adguardapp/scripts/transport-packaging/manifest.production.json} \
+  --source-policy ${SOURCE_POLICY:-/opt/stack/adguardapp/scripts/transport-packaging/source_policy.production.json} \
+  --bin-root ${BIN_ROOT:-/opt/selective-vpn/bin} \
+  --component ${COMPONENTS:-} \
+  --target ${TARGET:-} \
+  --rollout-stage ${ROLLOUT_STAGE:-stable} \
+  --cohort-id ${COHORT_ID:-} \
+  --signature-mode ${SIGNATURE_MODE:-} \
+  --min-interval-sec ${MIN_INTERVAL_SEC:-21600} \
+  --jitter-sec ${JITTER_SEC:-300}
+
+[Install]
+WantedBy=multi-user.target

scripts/transport-packaging/systemd/transport-packaging-auto-update.timer

@@ -0,0 +1,12 @@
+[Unit]
+Description=Run transport packaging auto-update periodically
+
+[Timer]
+OnBootSec=5min
+OnUnitActiveSec=30min
+RandomizedDelaySec=5min
+Persistent=true
+Unit=transport-packaging-auto-update.service
+
+[Install]
+WantedBy=timers.target