Add encryption and setup wizard features

ENCRYPTION:
- Add cryptography library for secure storage
- Implement Fernet encryption for sensitive settings
- Key derived from SESSION_SECRET
- Auto-encrypt/decrypt transparent to app
- "enc:" prefix identifies encrypted values
- Graceful fallback if crypto unavailable

SETUP WIZARD:
- Detect fresh installs needing configuration
- 3-step wizard: Infrastructure, Security, AI Services
- "/" redirects to wizard if setup required
- Auto-generate session_secret option
- Skip option for advanced users
- Beautiful UI with progress indicators

UI IMPROVEMENTS:
- Enhanced sensitive field display
- Lock icon showing encryption status
- Improved show/hide toggle for passwords
- Better visual hierarchy

FILES:
- app/utils/encryption.py - Encryption utilities
- app/utils/setup_wizard.py - Wizard detection logic
- app/views/wizard.py - Wizard routes
- frontend/templates/setup_wizard.html - Wizard UI
- requirements.txt - Added cryptography
- IMPLEMENTATION_CHECKLIST.md - Status tracking

Co-authored-by: christianlouis <361235+christianlouis@users.noreply.github.com>

app/views/general.py

@@ -14,7 +14,25 @@ router = APIRouter()
 
 @router.get("/", include_in_schema=False)
 async def serve_index(request: Request, db: Session = Depends(get_db)):
-    """Serve the index/home page."""
+    """
+    Serve the index/home page.
+    
+    If the system requires initial setup, redirect to the setup wizard.
+    """
+    # Check if setup wizard is needed
+    from app.utils.setup_wizard import is_setup_required
+    from app.utils.settings_service import get_setting_from_db
+    
+    # Check if setup was explicitly skipped
+    setup_skipped = get_setting_from_db(db, "_setup_wizard_skipped")
+    
+    # Check setup completion query param
+    setup_complete = request.query_params.get("setup") == "complete"
+    
+    if not setup_skipped and not setup_complete and is_setup_required():
+        logger.info("System requires initial setup, redirecting to wizard")
+        return RedirectResponse(url="/setup?step=1", status_code=303)
+    
     # Get provider information from config validator
     providers = get_provider_status()