v0.4.2 — Full-stack runtime fixes

What's fixed

FreePBX API / OAuth2 module installed

• The api module is now installed during the Docker build, providing the OAuth2 token endpoint and GraphQL API that the portal uses via src/lib/freepbx.ts
• Auto-registers the portal as an OAuth2 client_credentials application on startup when FREEPBX_CLIENT_ID and FREEPBX_CLIENT_SECRET are set

AMI secret wiring

• Fixed env var name mismatch: the entrypoint was looking for AMI_SECRET but the compose file passes FREEPBX_AMI_SECRET

Landing page cleanup

• Removed "7-day free trial" mentions from the landing page CTA

Previous fixes (v0.4.1)

• AppArmor apparmor=unconfined on all compose services
• FreePBX FPM pool runs as asterisk user (fixes 503 on FreePBX UI)
• Removed phantom avantfax service and redundant external mariadb
• FreePBX installer exit-code workaround