Add READMEs for AUR CLI and API packages

- aur-cli: Lightweight CLI-only usage documentation
- aur-api: REST API with HTTPS/TLS configuration docs
- aur: Updated to reflect Python 3.11-3.14 support

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

aur/README.md

@@ -1,6 +1,6 @@
 # Stegasoo AUR Package
 
-> **Note:** Uses Python 3.12 via `python312` AUR package (jpegio not yet compatible with 3.13)
+Full package with CLI, Web UI, and REST API. Supports Python 3.11-3.14.
 
 ## Installation
 
@@ -20,15 +20,15 @@ makepkg -si
 
 ## What Gets Installed
 
-- `/opt/stegasoo/venv/` - Self-contained Python 3.12 venv with all dependencies
+- `/opt/stegasoo/venv/` - Self-contained Python venv with all dependencies
 - `/usr/bin/stegasoo` - CLI symlink
-- `/usr/lib/systemd/system/stegasoo-web.service` - Web UI service
-- `/usr/lib/systemd/system/stegasoo-api.service` - REST API service
+- `/usr/lib/systemd/system/stegasoo-web.service` - Web UI service (port 5000)
+- `/usr/lib/systemd/system/stegasoo-api.service` - REST API service (port 8000, HTTPS)
 
 ## Optional Dependencies
 
 ```bash
-# QR code reading from webcam/images
+# QR code reading from webcam/images (recommended)
 sudo pacman -S zbar
 ```
 
@@ -39,41 +39,52 @@ All other dependencies are bundled in the venv.
 ### CLI
 ```bash
 stegasoo --help
-stegasoo generate --rsa --qr-ascii
-stegasoo encode -i carrier.jpg -r reference.jpg -m "secret" -P passphrase -p 123456
+stegasoo generate                    # Generate passphrase + PIN
+stegasoo generate --rsa --qr-ascii   # With RSA keys and QR codes
+stegasoo encode -i carrier.jpg -r reference.jpg -m "secret" -P "word1 word2 word3 word4" -p 123456
+stegasoo decode -i encoded.png -r reference.jpg -P "word1 word2 word3 word4" -p 123456
 ```
 
-### Web UI (systemd)
+### Web UI
 ```bash
-# Create service user (first time)
-sudo useradd -r -s /usr/bin/nologin stegasoo
-
-# Start service
+# Start service (user created automatically on install)
 sudo systemctl enable --now stegasoo-web
 
 # Access at http://localhost:5000
 ```
 
-### REST API (systemd)
+### REST API
 ```bash
-# Start service
+# Create an API key first
+sudo -u stegasoo stegasoo api keys create mykey
+
+# Start service (HTTPS with auto-generated self-signed cert)
 sudo systemctl enable --now stegasoo-api
 
-# Access at http://localhost:8000/docs
+# Access docs at https://localhost:8000/docs
+curl -k -H "X-API-Key: YOUR_KEY" https://localhost:8000/
 ```
 
-### Manual run (without systemd)
+### HTTPS Configuration
+
+The API uses HTTPS by default with auto-generated self-signed certificates.
+
 ```bash
-# Web UI
-/opt/stegasoo/venv/bin/python -m gunicorn -b 0.0.0.0:5000 \
-    --chdir /opt/stegasoo/venv/lib/python3.12/site-packages/frontends/web app:app
+# View certificate info
+stegasoo api tls info
 
-# REST API
-/opt/stegasoo/venv/bin/uvicorn \
-    --app-dir /opt/stegasoo/venv/lib/python3.12/site-packages/frontends/api \
-    main:app --host 0.0.0.0 --port 8000
+# Generate new self-signed cert
+sudo -u stegasoo stegasoo api tls generate
+
+# Use custom certs (edit service file)
+sudo systemctl edit stegasoo-api
 ```
 
+## Alternative Packages
+
+- `stegasoo-cli-git` - CLI only, minimal dependencies
+- `stegasoo-api-git` - CLI + REST API, no web UI
+
 ## Maintainer
 
 Aaron D. Lee