feat: phase 3 redesign, game images, auth system, vm guides, service isolation

- Redesign all internal pages to warm/gold aesthetic (catalog, game detail,
  documentary, about, donate, community, guides, contact, server-status,
  login, profile, admin, not-found)
- Add real cover images for all 4 games via Strapi CMS with getImageUrl helper
- Integrate NextAuth v5 with Authentik OIDC authentication
- Add new public pages: community, guides, contact, server-status
- Add new protected pages: login, profile, admin dashboard
- Remove legacy AFC/MercadoPago system entirely
- Add Docker Compose split files for service isolation (main, auth, fusionfall, nier)
- Add OpenFusion VM deployment configs (config.vm.ini, systemd service, README-VM)
- Add NieR Reincarnation server guide and desktop client guide
- Add architecture docs for multi-VM deployment
- Add healthcheck, SSE, contact, newsletter, admin API routes
- Add reusable UI components, skeleton loaders, activity feed, bookmark system
- Update deployment and game server documentation

docker/docker-compose.yml

@@ -2,6 +2,10 @@ services:
   postgres:
     image: postgres:16-alpine
     restart: unless-stopped
+    deploy:
+      resources:
+        limits:
+          memory: 512M
     volumes:
       - postgres_data:/var/lib/postgresql/data
     environment:
@@ -15,6 +19,10 @@ services:
     image: minio/minio:latest
     restart: unless-stopped
     command: server /data --console-address ":9001"
+    deploy:
+      resources:
+        limits:
+          memory: 512M
     volumes:
       - minio_data:/data
     environment:
@@ -29,6 +37,12 @@ services:
       context: ../apps/cms
       dockerfile: Dockerfile
     restart: unless-stopped
+    deploy:
+      resources:
+        limits:
+          memory: 1536M
+    volumes:
+      - cms_uploads:/app/public/uploads
     depends_on:
       - postgres
       - minio
@@ -40,6 +54,8 @@ services:
       DATABASE_NAME: ${DATABASE_NAME:-afterlife}
       DATABASE_USERNAME: ${DATABASE_USERNAME:-afterlife}
       DATABASE_PASSWORD: ${DATABASE_PASSWORD:-afterlife}
+      REDIS_HOST: redis
+      REDIS_PORT: 6379
       APP_KEYS: ${APP_KEYS}
       API_TOKEN_SALT: ${API_TOKEN_SALT}
       ADMIN_JWT_SECRET: ${ADMIN_JWT_SECRET}
@@ -53,12 +69,21 @@ services:
       context: ../
       dockerfile: apps/web/Dockerfile
     restart: unless-stopped
+    deploy:
+      resources:
+        limits:
+          memory: 1536M
     depends_on:
       - cms
     environment:
       STRAPI_URL: http://cms:1337
       STRAPI_API_TOKEN: ${STRAPI_API_TOKEN}
       NEXT_PUBLIC_STRAPI_URL: ${PUBLIC_STRAPI_URL:-http://localhost:1337}
+      DATABASE_HOST: postgres
+      DATABASE_PORT: 5432
+      DATABASE_NAME: ${DATABASE_NAME:-afterlife}
+      DATABASE_USERNAME: ${DATABASE_USERNAME:-afterlife}
+      DATABASE_PASSWORD: ${DATABASE_PASSWORD:-afterlife}
     ports:
       - "3000:3000"
 
@@ -76,6 +101,19 @@ services:
       - certbot_certs:/etc/letsencrypt:ro
       - certbot_www:/var/www/certbot:ro
 
+  redis:
+    image: redis:7-alpine
+    restart: unless-stopped
+    command: redis-server --maxmemory 256mb --maxmemory-policy allkeys-lru --appendonly yes
+    deploy:
+      resources:
+        limits:
+          memory: 256M
+    volumes:
+      - redis_data:/data
+    ports:
+      - "6379:6379"
+
   certbot:
     image: certbot/certbot
     volumes:
@@ -85,5 +123,7 @@ services:
 volumes:
   postgres_data:
   minio_data:
+  cms_uploads:
+  redis_data:
   certbot_certs:
   certbot_www: