fix: resolve WebUI API proxy ECONNREFUSED and configmap placeholder issues

- Fix route handlers to use API_GATEWAY_URL env var with correct K8s fallback
  instead of localhost:3015
- Replace ${} placeholders in configmap.yaml with actual static values to
  prevent kustomize from overwriting envsubst-generated config
- Separate secrets into dedicated secrets.yaml for envsubst processing
- Update deploy.sh to only envsubst secrets (configmap now has static values)

Made-with: Cursor

backend/deploy/k8s/configmap.yaml

@@ -29,41 +29,24 @@ data:
   OLLAMA_MODEL: "qwen3.5:9b"
   OLLAMA_EMBEDDING_MODEL: "qwen3-embedding:0.6b"
   OLLAMA_NUM_PARALLEL: "2"
-  DEFAULT_LLM_MODEL: "${DEFAULT_LLM_MODEL}"
-  DEFAULT_LLM_PROVIDER: "${DEFAULT_LLM_PROVIDER}"
-  TIMEWEB_API_BASE_URL: "${TIMEWEB_API_BASE_URL}"
-  TIMEWEB_AGENT_ACCESS_ID: "${TIMEWEB_AGENT_ACCESS_ID}"
-  TRAVELPAYOUTS_TOKEN: "${TRAVELPAYOUTS_TOKEN}"
-  NEXT_PUBLIC_ENABLED_ROUTES: "${NEXT_PUBLIC_ENABLED_ROUTES}"
-  NEXT_PUBLIC_TWOGIS_API_KEY: "${NEXT_PUBLIC_TWOGIS_API_KEY}"
-  S3_ENDPOINT: "${S3_ENDPOINT}"
-  S3_ACCESS_KEY: "${S3_ACCESS_KEY}"
-  S3_SECRET_KEY: "${S3_SECRET_KEY}"
-  S3_BUCKET: "${S3_BUCKET}"
-  S3_USE_SSL: "${S3_USE_SSL}"
-  S3_REGION: "${S3_REGION}"
-  S3_PUBLIC_URL: "${S3_PUBLIC_URL}"
-  SMTP_HOST: "${SMTP_HOST}"
-  SMTP_PORT: "${SMTP_PORT}"
-  SMTP_USER: "${SMTP_USER}"
-  SMTP_FROM: "${SMTP_FROM}"
-  SMTP_TLS: "${SMTP_TLS}"
+  DEFAULT_LLM_MODEL: "gpt-4o-mini"
+  DEFAULT_LLM_PROVIDER: "openai"
+  TIMEWEB_API_BASE_URL: "https://api.timeweb.cloud"
+  TIMEWEB_AGENT_ACCESS_ID: "9df5206a-86e8-4c8d-87a7-6b95eb0ecab0"
+  TRAVELPAYOUTS_TOKEN: "83465cb3013f97f6eed45d3567721244"
+  NEXT_PUBLIC_ENABLED_ROUTES: "/travel,/learning,/history,/medicine,/discover"
+  NEXT_PUBLIC_TWOGIS_API_KEY: "e5fd2c5b-a5bc-40ec-94b3-6b5a396ebba0"
+  S3_ENDPOINT: "minio:9000"
+  S3_ACCESS_KEY: "minioadmin"
+  S3_SECRET_KEY: "minioadmin"
+  S3_BUCKET: "gooseek-artifacts"
+  S3_USE_SSL: "false"
+  S3_REGION: "us-east-1"
+  S3_PUBLIC_URL: "https://storage.gooseek.ru"
+  SMTP_HOST: "smtp.timeweb.ru"
+  SMTP_PORT: "465"
+  SMTP_USER: "2fa@gooseek.ru"
+  SMTP_FROM: "GooSeek 2FA <2fa@gooseek.ru>"
+  SMTP_TLS: "true"
   SITE_URL: "https://gooseek.ru"
   SITE_NAME: "GooSeek"
----
-apiVersion: v1
-kind: Secret
-metadata:
-  name: gooseek-secrets
-  namespace: gooseek
-type: Opaque
-stringData:
-  OPENAI_API_KEY: "${OPENAI_API_KEY}"
-  ANTHROPIC_API_KEY: "${ANTHROPIC_API_KEY}"
-  GEMINI_API_KEY: "${GEMINI_API_KEY}"
-  JWT_SECRET: "${JWT_SECRET}"
-  TIMEWEB_API_KEY: "${TIMEWEB_API_KEY}"
-  OLLAMA_API_TOKEN: "${OLLAMA_API_TOKEN}"
-  SMTP_PASSWORD: "${SMTP_PASSWORD}"
-  POSTGRES_USER: "gooseek"
-  POSTGRES_PASSWORD: "gooseek"