feat: phase 3 redesign, game images, auth system, vm guides, service isolation

- Redesign all internal pages to warm/gold aesthetic (catalog, game detail,
  documentary, about, donate, community, guides, contact, server-status,
  login, profile, admin, not-found)
- Add real cover images for all 4 games via Strapi CMS with getImageUrl helper
- Integrate NextAuth v5 with Authentik OIDC authentication
- Add new public pages: community, guides, contact, server-status
- Add new protected pages: login, profile, admin dashboard
- Remove legacy AFC/MercadoPago system entirely
- Add Docker Compose split files for service isolation (main, auth, fusionfall, nier)
- Add OpenFusion VM deployment configs (config.vm.ini, systemd service, README-VM)
- Add NieR Reincarnation server guide and desktop client guide
- Add architecture docs for multi-VM deployment
- Add healthcheck, SSE, contact, newsletter, admin API routes
- Add reusable UI components, skeleton loaders, activity feed, bookmark system
- Update deployment and game server documentation

docker/docker-compose.fusionfall.yml

@@ -0,0 +1,36 @@
+version: "3.8"
+
+services:
+  fusionfall:
+    build:
+      context: ../servers/openfusion
+      dockerfile: Dockerfile
+    container_name: fusionfall
+    restart: unless-stopped
+    ports:
+      - "23000:23000/tcp"
+      - "23001:23001/tcp"
+    volumes:
+      - ../servers/openfusion/data:/usr/src/app/data
+      - ../servers/openfusion/tdata:/usr/src/app/tdata:ro
+      - ../servers/openfusion/config.ini:/usr/src/app/config.ini
+    environment:
+      - SHARD_IP=${FUSIONFALL_SHARD_IP:-192.168.10.84}
+      - MOTD=${FUSIONFALL_MOTD:-Bienvenido a Project Afterlife - FusionFall Academy}
+      - ACCOUNT_LEVEL=${FUSIONFALL_ACCOUNT_LEVEL:-1}
+    networks:
+      - fusionfall
+    # Aislamiento: sin acceso saliente a internet (red interna)
+    # Los clientes locales se conectan via ports mapeados en el host
+    sysctls:
+      - net.ipv4.ip_unprivileged_port_start=23000
+    healthcheck:
+      test: ["CMD-SHELL", "ss -tln | grep -q ':23000' || exit 1"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+
+networks:
+  fusionfall:
+    driver: bridge
+    internal: false