fix(cli): separate api and gateway urls

[orga-agent]

Summary

• Split API and Gateway configuration so shares use the API Worker while attachments and gateway requests use the FSE Gateway.
• Forward FLICKNOTE_GATEWAY_URL to the managed daemon and document both endpoint variables.
• Update the locked h2 security patch so the required advisory check passes.

Verification

• cargo test --workspace
• cargo clippy --workspace --all-targets --all-features -- -D warnings
• cargo deny check advisories
• cargo fmt --all --check