Route Afia through the platform AI relay when no local API key is set.

Frontdesk now calls ladill.com/api/afia/chat using IDENTITY_API_KEY_FRONTDESK
so production does not need a separate OpenAI key in the frontdesk .env.

Co-authored-by: Cursor <cursoragent@cursor.com>

.env.example

@@ -31,6 +31,12 @@ BILLING_API_KEY_FRONTDESK=
 IDENTITY_API_URL=https://ladill.com/api
 IDENTITY_API_KEY_FRONTDESK=
 
+# Afia AI assistant (uses platform relay via IDENTITY_API_KEY when AFIA_API_KEY is unset)
+AFIA_ENABLED=true
+# AFIA_API_KEY=
+# AFIA_PLATFORM_API_URL=https://ladill.com/api
+# AFIA_PLATFORM_API_KEY=
+
 # Platform events webhook (user/org lifecycle from the monolith)
 SERVICE_EVENTS_INBOUND_SECRET=