feat: expose Redis externally with password auth for AI dev stream access

- Add requirepass to Redis with REDIS_PASSWORD env var
- Expose port 6379:6379 for external connections
- Update REDIS_URL in api and worker to include password
- Update healthcheck to pass auth flag

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

docker-compose.vps.yml

@@ -18,10 +18,15 @@ services:
  
   redis:
     image: redis:7-alpine
+    command: redis-server --requirepass ${REDIS_PASSWORD}
+    ports:
+      - '6379:6379'
+    environment:
+      REDIS_PASSWORD: ${REDIS_PASSWORD}
     volumes:
       - redis_data:/data
     healthcheck:
-      test: ['CMD', 'redis-cli', 'ping']
+      test: ['CMD-SHELL', 'redis-cli -a $REDIS_PASSWORD ping']
       interval: 5s
       timeout: 5s
       retries: 5
@@ -56,7 +61,7 @@ services:
       - traefik.http.services.tower-api.loadbalancer.server.port=3001
     environment:
       DATABASE_URL: postgresql://tower:${DB_PASSWORD}@postgres:5432/tower
-      REDIS_URL: redis://redis:6379
+      REDIS_URL: redis://:${REDIS_PASSWORD}@redis:6379
       MEILI_URL: http://meilisearch:7700
       MEILI_MASTER_KEY: ${MEILI_MASTER_KEY}
       JWT_SECRET: ${JWT_SECRET}
@@ -89,7 +94,7 @@ services:
       dockerfile: apps/worker/Dockerfile
     environment:
       DATABASE_URL: postgresql://tower:${DB_PASSWORD}@postgres:5432/tower
-      REDIS_URL: redis://redis:6379
+      REDIS_URL: redis://:${REDIS_PASSWORD}@redis:6379
       MEILI_URL: http://meilisearch:7700
       MEILI_MASTER_KEY: ${MEILI_MASTER_KEY}
       JWT_SECRET: ${JWT_SECRET}