Move ingestion + Telegram/Bale/Divar config to DB-backed admin settings

- AppSetting gains source config: AutoIngestEnabled, IngestIntervalMinutes, Telegram/Bale/Divar enabled+channels/token/queries
- IListingSource.FetchAsync(AppSetting) — sources read config from DB, not IOptions/appsettings; sample source dev-only
- IngestionWorker reads AutoIngest+interval from DB each cycle (toggle at runtime, no redeploy)
- /Admin/Settings gets a 'منابع جمع‌آوری' section; removed Ingestion env/appsettings + compose env vars
- ENV_FILE shrinks to HOST_PORT + POSTGRES_* + ADMIN_PHONE (AI + sources are all in-admin); migration

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

src/JobsMedical.Web/Services/Scraping/IListingSource.cs

@@ -1,15 +1,17 @@
+using JobsMedical.Web.Models;
+
 namespace JobsMedical.Web.Services.Scraping;
 
 /// <summary>One raw post pulled from a source (a Telegram message, a Divar ad, etc.).</summary>
 public record ScrapedItem(string Source, string RawText, string? SourceUrl = null);
 
 /// <summary>
-/// A pluggable source the ingestion engine pulls from. Implement once per channel/site.
-/// `Enabled` lets a source be present but dormant until it's configured with credentials.
+/// A pluggable source the ingestion engine pulls from. Configuration (enabled, channels, tokens)
+/// comes from the DB-backed <see cref="AppSetting"/> passed in — set in the admin panel, not env.
+/// A disabled/unconfigured source returns an empty list.
 /// </summary>
 public interface IListingSource
 {
     string Name { get; }
-    bool Enabled { get; }
-    Task<IReadOnlyList<ScrapedItem>> FetchAsync(CancellationToken ct = default);
+    Task<IReadOnlyList<ScrapedItem>> FetchAsync(AppSetting settings, CancellationToken ct = default);
 }