feat(source2): push all latest files - device labeling, help system, proxy docs, database isolation fix

- Added DOKUMENTASI-FILTER-PER-SITE.md (site isolation docs)
- Fixed start-with-env.js to force-load .env.production
- Fixed MONGODB_URI hostname from mongodb-netify to mongodb.prod.proit.id
- Updated .gitignore to exclude sensitive scripts and credential files
- Minor UI and labeling improvements

backend/models/User.js

@@ -14,11 +14,15 @@ const UserSchema = new mongoose.Schema({
   password_hash:   { type: String, required: true },
   account_name:    { type: String, default: null },
   profile_picture: { type: String, default: null },
-  role:            { type: String, enum: ['SUPER_ADMIN', 'TENANT_ADMIN', 'SOC_ANALYST', 'ENGINEER', 'AGENT_VIEWER'], default: 'AGENT_VIEWER' },
+  role:            { type: String, enum: ['SUPER_ADMIN', 'EXECUTIVE', 'TENANT_ADMIN', 'SOC_ANALYST', 'ENGINEER', 'AGENT_VIEWER', 'COMPANY_ADMIN', 'COMPANY_OPERATOR', 'COMPANY_VIEWER'], default: 'AGENT_VIEWER' },
   site_uuid:       { type: String, default: null, index: true },
   agent_uuid:      { type: String, default: null },
+  company_name:    { type: String, default: null, index: true },
+  agent_uuids:     { type: [String], default: [] },
   created_by:      { type: String, default: null, index: true },
   is_active:       { type: Boolean, default: true },
+  login_attempts:  { type: Number, default: 0 },
+  lockout_until:   { type: Date, default: null },
 }, {
   timestamps: { createdAt: 'created_at', updatedAt: 'updated_at' }
 });