fix(auth): switch to K8s Redis, add claude.ai/chatgpt CORS origins

- REDIS_URL → K8s ClusterIP with auth (fixes silent hang on host Redis)
- Socket timeouts (connectTimeout 3s, socketTimeout 5s) on Redis client
- Add claude.ai, chatgpt.com, chat.openai.com to CORS allowlist
- Update hermes-mcp image SHA (includes above changes)
- Add squaremcp-broker-demo.mp4 to site Dockerfile; bump site image SHA

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

product/site/Dockerfile

@@ -7,6 +7,7 @@ COPY product/site/script.js /usr/share/nginx/html/script.js
 COPY product/site/squaremcp-logo.svg /usr/share/nginx/html/squaremcp-logo.svg
 COPY product/site/squaremcp-hero-loop.mp4 /usr/share/nginx/html/squaremcp-hero-loop.mp4
 COPY product/site/squaremcp-tiktok-launch.mp4 /usr/share/nginx/html/squaremcp-tiktok-launch.mp4
+COPY product/site/squaremcp-broker-demo.mp4 /usr/share/nginx/html/squaremcp-broker-demo.mp4
 COPY product/site/tiktok /usr/share/nginx/html/tiktok
 COPY product/site/tiktokkFNJHjzDuzvGIlXnK4MaGw3MSluybOih.txt /usr/share/nginx/html/tiktokkFNJHjzDuzvGIlXnK4MaGw3MSluybOih.txt
 COPY product/site/privacy.html /usr/share/nginx/html/privacy.html

product/site/squaremcp-k8s-ingress.yaml

@@ -15,7 +15,7 @@ spec:
     spec:
       containers:
         - name: squaremcp-site
-          image: localhost:32000/squaremcp-site@sha256:395e736f1899ce0f2402e34caa95359e2eb54b5424318cf8139982e66b35a974
+          image: localhost:32000/squaremcp-site@sha256:1330b918347b873b8dc18dc309349bc47c300463c7b6d5e43d4270bb17366269
           imagePullPolicy: Always
           ports:
             - containerPort: 8080