feat: phase 3 redesign, game images, auth system, vm guides, service isolation

- Redesign all internal pages to warm/gold aesthetic (catalog, game detail,
  documentary, about, donate, community, guides, contact, server-status,
  login, profile, admin, not-found)
- Add real cover images for all 4 games via Strapi CMS with getImageUrl helper
- Integrate NextAuth v5 with Authentik OIDC authentication
- Add new public pages: community, guides, contact, server-status
- Add new protected pages: login, profile, admin dashboard
- Remove legacy AFC/MercadoPago system entirely
- Add Docker Compose split files for service isolation (main, auth, fusionfall, nier)
- Add OpenFusion VM deployment configs (config.vm.ini, systemd service, README-VM)
- Add NieR Reincarnation server guide and desktop client guide
- Add architecture docs for multi-VM deployment
- Add healthcheck, SSE, contact, newsletter, admin API routes
- Add reusable UI components, skeleton loaders, activity feed, bookmark system
- Update deployment and game server documentation

apps/cms/config/plugins.ts

@@ -6,4 +6,24 @@ export default () => ({
       locales: ["es", "en"],
     },
   },
+  "users-permissions": {
+    config: {
+      providers: {
+        // Authentik OIDC provider for CMS admin SSO
+        authentik: {
+          enabled: true,
+          icon: "authentik",
+          key: "",
+          secret: "",
+          callback: `${process.env.PUBLIC_STRAPI_URL || "http://localhost:1337"}/api/auth/authentik/callback`,
+          scope: ["openid", "email", "profile"],
+          // Authentik endpoints
+          authorization_endpoint: `${process.env.AUTHENTIK_URL || "http://10.0.0.20:9000"}/application/o/authorize/`,
+          access_token_endpoint: `${process.env.AUTHENTIK_URL || "http://10.0.0.20:9000"}/application/o/token/`,
+          access_token_params: {},
+          grant_type: "authorization_code",
+        },
+      },
+    },
+  },
 });

apps/cms/src/api/game/content-types/game/schema.json

@@ -62,7 +62,6 @@
     "coverImage": {
       "type": "media",
       "multiple": false,
-      "required": true,
       "allowedTypes": ["images"]
     },
     "serverStatus": {