feat(storage,deploy): delad S3/mock-lagring, SSM .env-sync, Gemini readyz

- @app/storage med MockStorage + AwsStorage delas mellan API och worker

- Workerns readUrl() ger presignerad S3-URL i aws-läge (fixar mock-s3 404)

- sync-env-from-ssm.py hämtar /cibello/prod/* och skriver .env; first-deploy.sh kör det i prod

- /readyz returnerar 503 om app.aamos.healthCheck() misslyckas

- docs/SECRETS.md med rotations- och SSM-regler

apps/api/package.json

@@ -24,6 +24,7 @@
     "@app/recipe-engine": "workspace:*",
     "@app/recommendation-engine": "workspace:*",
     "@app/shared-types": "workspace:*",
+    "@app/storage": "workspace:*",
     "@app/subscriptions": "workspace:*",
     "@app/validation": "workspace:*",
     "@aws-sdk/client-s3": "^3.1102.0",
@@ -60,6 +61,7 @@
       "@app/recipe-engine",
       "@app/recommendation-engine",
       "@app/shared-types",
+      "@app/storage",
       "@app/subscriptions",
       "@app/validation"
     ]