docs: disable Swagger by default and document AUTH_OPENAPI_ENABLED

Author: Rupa-421

README.md

@@ -58,6 +58,7 @@ We extend our gratitude to Provectus for their past support in groundbreaking wo
 * **Custom SerDe Plugin Support** – Use built-in serializers/deserializers like AWS Glue and Smile, or create your own custom plugins.
 * **Role-Based Access Control** – [Manage granular UI permissions](https://ui.docs.kafbat.io/configuration/rbac-role-based-access-control) with RBAC.
 * **Data Masking** – [Obfuscate sensitive data](https://ui.docs.kafbat.io/configuration/data-masking) in topic messages to enhance privacy and compliance.
+* **API Documentation (Swagger UI)** - Access full API specifications via built-in Swagger UI (can be enabled via `AUTH_OPENAPI_ENABLED` variable).
 * **MCP Server** - [Model Context Protocol](https://ui.docs.kafbat.io/faq/mcp) Server
 
 
@@ -103,7 +104,7 @@ To run Kafbat UI, you can use either a pre-built Docker image or build it (or a
 ## Quick start (Demo run)
 
 ```bash
-docker run -it -p 8080:8080 -e DYNAMIC_CONFIG_ENABLED=true ghcr.io/kafbat/kafka-ui
+docker run -it -p 8080:8080 -e DYNAMIC_CONFIG_ENABLED=true -e AUTH_OPENAPI_ENABLED=true ghcr.io/kafbat/kafka-ui
 ```
 
 Then access the web UI at [http://localhost:8080](http://localhost:8080)
@@ -121,6 +122,7 @@ services:
       - 8080:8080
     environment:
       DYNAMIC_CONFIG_ENABLED: 'true'
+      AUTH_OPENAPI_ENABLED: 'true'
     volumes:
       - ~/kui/config.yml:/etc/kafkaui/dynamic_config.yaml
 ```

api/src/main/resources/application.yml

@@ -15,8 +15,9 @@ management:
 springdoc:
   path: /swagger 
   api-docs:
-    enabled: true
+    enabled: ${AUTH_OPENAPI_ENABLED:false}
   swagger-ui:
+    enabled: ${AUTH_OPENAPI_ENABLED:false}
     url: /openapi/kafbat-ui-api.yaml
     urls:
       - name: kafbat-ui