feat: Gemini AI (doc OCR + face match) + role-assignment endpoints

- GeminiService (integrations/gemini, @Global): extractDocument (OCR fields) + faceMatch; graceful if no GEMINI_API_KEY
- documents: face-match now real via Gemini; POST /admin/documents/:id/ocr extracts fields for CS auto-fill
- roles: PATCH /admin/users/:id/role (admin) + POST /platform/users/role (bootstrap via x-platform-secret)
- config: gemini + platform.secret; .env.example entries

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

apps/driver/bubble-master/CHANGELOG.md

@@ -0,0 +1,14 @@
+## 0.0.1
+
+* Created and implemented startBubbleHead and closeBubbleHead usecases for bubble head package
+
+
+## 0.0.2
+* Fix read-me documentation
+
+## 0.0.3
+* Fix read-me documentation (added `Buy me a coffee link`)
+
+## 0.0.4
+* Added optional parameter to enable or disable send-app-to-background
+* Updated documentation