Remove query-string cache-busting from static assets

Drop ?v=N version pins from all JS imports and HTML <link>/<script> tags.
Cache invalidation is now handled solely by server-side cache-control headers.
Update docs and AGENTS.md accordingly.

webui/static/pages/passkeys.js

@@ -25,7 +25,7 @@ import {
     webauthnSupported,
     isModalProcessing,
     setModalProcessing,
-} from '/static/hoover/index.js?v=14';
+} from '/static/hoover/index.js';
 
 const state = reactive({ credentials: [], loading: true, refreshing: false, error: null });