feat(source2): push all latest files - device labeling, help system, proxy docs, database isolation fix

- Added DOKUMENTASI-FILTER-PER-SITE.md (site isolation docs)
- Fixed start-with-env.js to force-load .env.production
- Fixed MONGODB_URI hostname from mongodb-netify to mongodb.prod.proit.id
- Updated .gitignore to exclude sensitive scripts and credential files
- Minor UI and labeling improvements

test/fetch-remote-headers.js

@@ -0,0 +1,25 @@
+const axios = require('axios');
+
+async function main() {
+  try {
+    console.log('Fetching https://demoplace.my.id/ ...');
+    const res1 = await axios.get('https://demoplace.my.id/', { maxRedirects: 0, validateStatus: () => true });
+    console.log('Status /:', res1.status);
+    console.log('Headers /:', res1.headers);
+    console.log('Body snippet /:', res1.data.substring(0, 500));
+  } catch (err) {
+    console.error('Error /:', err.message);
+  }
+
+  try {
+    console.log('\nFetching https://demoplace.my.id/login ...');
+    const res2 = await axios.get('https://demoplace.my.id/login', { maxRedirects: 0, validateStatus: () => true });
+    console.log('Status /login:', res2.status);
+    console.log('Headers /login:', res2.headers);
+    console.log('Body snippet /login:', res2.data.substring(0, 500));
+  } catch (err) {
+    console.error('Error /login:', err.message);
+  }
+}
+
+main().catch(console.error);