Portal: Phoenix API Railing wiring, env example, per-tenant rate limit

- Portal: phoenix-api-client, usePhoenixRailing hooks, /infrastructure page
- Portal: PhoenixHealthTile on dashboard, resources page uses tenant me/resources
- Sidebar: Infrastructure link; Keycloak token used for API calls (BFF)
- api/.env.example: PHOENIX_RAILING_URL, PHOENIX_RAILING_API_KEY
- rate-limit: key by tenant when tenantContext present

Made-with: Cursor

api/.env.example

@@ -21,5 +21,14 @@ KEYCLOAK_CLIENT_SECRET=your_keycloak_client_secret
 # For production: minimum 64 characters
 JWT_SECRET=your_jwt_secret_here_minimum_64_chars_for_production
 
+# Phoenix API Railing (optional — for /api/v1/infra, /api/v1/ve, /api/v1/health proxy)
+# Base URL of Phoenix Deploy API or Phoenix API (e.g. http://phoenix-deploy-api:4001)
+PHOENIX_RAILING_URL=
+# Optional: API key for server-to-server calls when railing requires PHOENIX_PARTNER_KEYS
+PHOENIX_RAILING_API_KEY=
+
+# Public URL for GraphQL Playground link (default http://localhost:4000)
+# PUBLIC_URL=https://api.sankofa.nexus
+
 # Logging
 LOG_LEVEL=info