feat(source2): push all latest files - device labeling, help system, proxy docs, database isolation fix

- Added DOKUMENTASI-FILTER-PER-SITE.md (site isolation docs)
- Fixed start-with-env.js to force-load .env.production
- Fixed MONGODB_URI hostname from mongodb-netify to mongodb.prod.proit.id
- Updated .gitignore to exclude sensitive scripts and credential files
- Minor UI and labeling improvements

.gitignore

@@ -66,3 +66,19 @@ CLAUDE.md
 docs/
 plans/
 .env*
+
+# Local uploads
+backend/public/api/uploads/
+
+# Sensitive helper scripts (contain hardcoded SSH/API credentials - local use only)
+compare-netify-vs-dashboard.js
+ssh-read-source1-proxy.js
+check-frontend-uri-now.js
+verify-final.js
+check-frontend-uri.js
+ssh-check-logs.js
+ssh-*.js
+
+# Sensitive documentation (contains production API keys / credentials)
+BUKTI-AKSES-MONGODB.txt
+DOKUMENTASI-PROXY-NETIFY.md