feat: browser-control server on host (real input) + remote-bot routing + ignore env backups

- control-server.mjs runs chrome-control.mjs LOCALLY on the browser host, so a
  remote bot's controlBrowser (BROWSER_CONTROL_URL) drives real xdotool input
  on THIS screen instead of the bot machine. Published on the LAN.
- controlBrowser tool posts to BROWSER_CONTROL_URL when set, else runs locally.
- Drop hard depends_on ollama so a browser-host doesn't start Ollama.
- gitignore .env.bak*/*.bak (a backup with tokens had been left untracked).

.gitignore

@@ -24,4 +24,7 @@ dist/
 qt.conf
 
 # Auto-generated version file (created at build time)
-src/jarvis/_version.py
+src/jarvis/_version.py
+# never commit env backups (contain tokens)
+.env.bak*
+*.bak