fix: resolve 3 critical UX bugs - home upload, auth, and form submit

1. Home page file drop now shows quick-action tool selector
2. Auth disabled by default in dev (Docker still defaults to true)
3. Tool settings wrapped in forms - Enter key triggers processing

apps/web/src/hooks/use-tool-processor.ts

@@ -43,9 +43,15 @@ export function useToolProcessor(toolId: string) {
         formData.append("file", files[0]);
         formData.append("settings", JSON.stringify(settings));
 
+        const headers: Record<string, string> = {};
+        const token = getToken();
+        if (token) {
+          headers.Authorization = `Bearer ${token}`;
+        }
+
         const res = await fetch(`/api/v1/tools/${toolId}`, {
           method: "POST",
-          headers: { Authorization: `Bearer ${getToken()}` },
+          headers,
           body: formData,
         });