Remove unused Dapr conversation.openai component

feat: replace Docker Compose with Dapr Multi-App Run + Kind

feat: add web-search tool with Brave Search API

fix: make BING_API_KEY secret conditional in tools.bicep

fix: use correct Easy Auth principal ID for personal MS account

debug: temporarily disable deadbolt, add whoami endpoint

feat: add nginx auth deadbolt + wire authAllowedPrincipal param

feat: upgrade web-fetch, add web-search endpoint

chore: remove stray .working-memory dir

feat: add tool-service container app

fix: move token sync to preprovision hook

chore: update MIND_REPO default to ianphil/macgyver

feat: add predeploy hook for token sync

refactor: extract MacGyver mind to ianphil/macgyver repo

fix: create /mind dir with app user permissions