Add a password-gated private instance mode for xaigen.

Keep Authentik on aigen, isolate library data per instance, and purge Comfy outputs from the desktop after they are saved on the server.

Co-authored-by: Cursor <cursoragent@cursor.com>

server/utils/pending.ts

@@ -17,6 +17,7 @@ export interface PendingJob {
   turbo: boolean
   seed: number
   startedAt: number
+  imageName?: string
 }
 
 function pendingRoot() {
@@ -82,6 +83,7 @@ export async function completePendingIfReady(pending: PendingJob) {
     thumb: null,
     comfyFilename: video.filename
   })
+  await purgeComfyArtifacts({ video, imageName: pending.imageName, promptId: pending.promptId })
   deletePendingJob(pending.jobId)
   return {
     type: 'complete' as const,