v0.2.3

Fixes #55: Cron scheduler no longer fires every minute. compute_next_run now offsets by +1 second so jobs respect their actual schedule.
Fixes #100: OpenRouter model prefix stripped before API call. Models like openrouter/google/gemini-2.5-flash now send the correct ID to the provider.
Fixes #83: Added OPENFANG_LISTEN env var override for Docker containers where 0.0.0.0 binding is needed.
Fixes #51: Dashboard auth prompt now detects 401 correctly by checking a protected endpoint. Added /api/workflows and /api/logs/stream to the public allowlist.
Fixes #65: Added 6 new OpenRouter models including free tier Llama 3.3 70B, Mistral 7B, Gemma 2 9B, Qwen 2.5 72B, and DeepSeek V3.
Fixes #68: Approval policy require_approval field now accepts boolean shorthand. false clears the list, true defaults to shell_exec.
Fixes #63 #47 #49: Custom model support via POST /api/models/custom. Persisted to disk, loaded on boot, with dashboard UI for adding models.