feat: MinIO integration — bucket finance, API service upload, Nginx routing

- 01-infra/nginx-configs: add MinIO /minio/ and /minio-console/ location blocks
  (port 9000 S3 API, port 9001 Console UI, path stripping via rewrite)
- 03-apiservice: integrate MinIO minio-python SDK for file upload
  - requirements.txt: add minio==7.2.11
  - app/core/config.py: add MINIO_ENDPOINT, ACCESS_KEY, SECRET_KEY, BUCKET_FINANCE, USE_SSL
  - app/services/minio_client.py: new — upload_file(), get_presigned_url(), delete_file()
  - app/routes/pages.py: replace local /data/uploads/ write with MinIO upload to finance bucket
  - docker-compose.yml: pass MinIO env vars to container
  - .env.example: document MinIO vars
- 07-minio/.env.example: add MINIO_SVC_ACCESS_KEY/SECRET_KEY section
- 07-minio/README.md: add Python minio SDK and Airflow DAG usage guide
- CLAUDE.md: project context (servers, SSH, paths, service distribution)
- document-obsidiant/: initial Obsidian docs for all services

03-apiservice/docker-compose.yml

@@ -30,6 +30,11 @@ services:
       - KEYCLOAK_CLIENT_ID=${API_KEYCLOAK_CLIENT_ID}
       - KEYCLOAK_CLIENT_SECRET=${API_KEYCLOAK_CLIENT_SECRET}
       - KEYCLOAK_REDIRECT_URI=${API_KEYCLOAK_REDIRECT_URI}
+      - MINIO_ENDPOINT=${MINIO_ENDPOINT:-192.168.100.9:9000}
+      - MINIO_ACCESS_KEY=${MINIO_SVC_ACCESS_KEY}
+      - MINIO_SECRET_KEY=${MINIO_SVC_SECRET_KEY}
+      - MINIO_BUCKET_FINANCE=${MINIO_BUCKET_FINANCE:-finance}
+      - MINIO_USE_SSL=${MINIO_USE_SSL:-false}
       - LOG_LEVEL=debug
     ports:
       - "8040:8040"