Dashboard API image: pass AUTH_MODE=fixed_code instead of CANYONOS_DISABLE_AUTH

[userAugustos]

Goal

The CLI starts the dashboard API image with the environment the image now requires. The image no longer reads CANYONOS_DISABLE_AUTH. It reads AUTH_MODE, and under NODE_ENV=production (which the image always sets) it refuses to boot when AUTH_MODE is unset.

Source of the change: CanyonCodeCoreAI/canyon-os PR #30.

Acceptance Criteria

• The CLI passes AUTH_MODE=fixed_code to the API container instead of CANYONOS_DISABLE_AUTH=true.
• The CLI passes every other variable that docs/canyonos-api-image.md in canyon-os lists as required for the image, with the values that doc names for a self-hosted stack.
• The CLI still generates a random JWT_SECRET per stack.
• A fresh ventis dashboard start against the new image boots, and the dashboard signs in and lists projects.

Guidance

• docs/canyonos-api-image.md in canyon-os is the contract. Read the version on the PR [Bug] Global Controller can get stalled if a future is unable to get deleted. #30 branch until it merges.
• No compatibility shim exists in the image for the old variable; a container started with only CANYONOS_DISABLE_AUTH=true fails at boot with an AUTH_MODE error.