chore(compose): AGENTOS_DEV_AUTH for local no-login runs; ignore local override

Add AGENTOS_DEV_AUTH=1 (default) to the agentos service so `docker compose up`
+ SPA work with no Keycloak — LOCAL DEV ONLY (disables auth; set =0 for the real
flow). Gitignore docker-compose.override.yml so ephemeral local overrides
(e.g. switching the trace backend to ClickHouse) never get committed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

Author: patel-lyzr

.gitignore

@@ -39,3 +39,6 @@ private.md
 PRIVATE.md
 *.private.md
 docs.md
+
+# Local-only compose overrides (e.g. pointing agentos at local ClickHouse)
+docker-compose.override.yml

docker-compose.yml

@@ -88,6 +88,13 @@ services:
     environment:
       AGENTOS_PORT: "8788"
       CA_BASE: http://harness:8787
+      # Local auth bypass: with no Keycloak/OIDC configured, the auth gate would
+      # 401 every request. AGENTOS_DEV_AUTH=1 makes it resolve a fixed admin
+      # principal so `docker compose up` + the SPA "just work" with no login.
+      # ⚠️  LOCAL DEV ONLY — this disables authentication entirely (everyone is
+      # admin). NEVER set it in a shared/deployed environment. Override with
+      # AGENTOS_DEV_AUTH=0 in .env to test the real Keycloak/API-key flow.
+      AGENTOS_DEV_AUTH: ${AGENTOS_DEV_AUTH:-1}
       MONGO_URL: mongodb://mongo:27017
       MONGO_DATABASE: ${MONGO_DATABASE:-computeragent-test}
       CLICKHOUSE_URL: http://clickhouse:8123