Fix: Use JSON config files for ESM compatibility

- Replace @simpleworkjs/conf with simple custom loader
- Use JSON config files (base, development, production, secrets)
- Add config.js with ESM-compatible deep merge
- Support env var overrides for critical settings
- Auth disabled in dev mode via development.json

conf/base.json

@@ -0,0 +1,27 @@
+{
+  "server": {
+    "port": 3000,
+    "host": "0.0.0.0"
+  },
+  "gateway": {
+    "url": "http://127.0.0.1:18789"
+  },
+  "session": {
+    "secret": "change-me-in-production",
+    "maxAge": 86400000
+  },
+  "auth": {
+    "disabled": false,
+    "ldap": {
+      "enabled": false,
+      "url": "ldap://localhost:389",
+      "baseDN": "ou=users,dc=example,dc=com",
+      "bindDN": "",
+      "bindPassword": "",
+      "searchFilter": "(uid={{username}})"
+    }
+  },
+  "data": {
+    "dir": "./data"
+  }
+}