Real channel fetch (Telegram/Bale/Divar) + AI-audited automation engine + CI/CD

- Fetch: Telegram via t.me/s, Bale via Bot API, Divar via web-search (HttpClient, config-gated, graceful)
- AI layer: DB-backed AppSetting (mode auto/manual, thresholds, AI endpoint/model/key/prompt/framework, auto-approve); OpenAI-compatible IAiAuditor (self-host/Iranian endpoints; fails safe to manual)
- Pipeline: fetch → dedupe(hash) → parse → validate → AI audit → Discard/Flag/Queue/auto-publish (resolve-or-create facility)
- Admin: /Admin/Settings automation+AI panel; queue shows confidence + AI verdict; flagged section
- CI/CD: Dockerfile, docker-compose.prod.yml, .gitea/workflows/ci-cd.yml, nginx vhost, DEPLOY.md; forwarded headers + /healthz + prod reference-only seed; ports 22/80/443 only

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/JobsMedical.Web/Pages/Admin/Index.cshtml

@@ -12,6 +12,7 @@
             (@JalaliDate.ToPersianDigits(Model.Queue.Count.ToString()) در صف،
             @JalaliDate.ToPersianDigits(Model.Flagged.Count.ToString()) پرچم‌خورده)
             · <a asp-page="/Admin/Facilities">تأیید مراکز درمانی</a>
+            · <a asp-page="/Admin/Settings">تنظیمات جمع‌آوری و AI</a>
         </p>
     </div>
 </div>