fix(gateway/services): admin node/render pages 500 — redirect loop + is_admin claim

- gateway proxy: trim trailing slash before forwarding upstream. gin's
  RedirectTrailingSlash adds /nodes → /nodes/ while render-svc redirects
  /nodes/ → /nodes, forming an infinite redirect loop (admin pages 500'd)
- accept is_admin as bool OR string "true" in render/file/notification/gateway
  auth middleware (identity emits it as a string) — admin endpoints were 403'ing

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

services/notification/internal/middleware/auth.go

@@ -37,7 +37,13 @@ func JWTAuth(secret string) gin.HandlerFunc {
 		claims, _ := token.Claims.(jwt.MapClaims)
 		userID, _ := uuid.Parse(fmt.Sprintf("%v", claims["sub"]))
 		tenantID, _ := uuid.Parse(fmt.Sprintf("%v", claims["tenant_id"]))
-		isAdmin, _ := claims["is_admin"].(bool)
+		isAdmin := false
+		switch v := claims["is_admin"].(type) {
+		case bool:
+			isAdmin = v
+		case string:
+			isAdmin = v == "true"
+		}
 		c.Set(CtxUserID, userID)
 		c.Set(CtxTenantID, tenantID)
 		c.Set(CtxIsAdmin, isAdmin)