Add admin-core frontend (Port 3008)

Next.js admin frontend for Core with 3 categories
(Communication, Infrastructure, Development), 13 modules,
2 roles (developer, ops), and 11 API proxy routes.
Includes docker-compose service and nginx SSL config.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docker-compose.yml

@@ -69,9 +69,12 @@ services:
       - "8093:8093"     # AI Compliance SDK
       - "8097:8097"     # RAG Service (NEU)
       - "8443:8443"     # Jitsi Meet
+      - "3008:3008"     # Admin Core
+      - "3010:3010"     # Portal Dashboard
     volumes:
       - ./nginx/conf.d:/etc/nginx/conf.d:ro
       - vault_certs:/etc/nginx/certs:ro
+      - ./nginx/html:/usr/share/nginx/html/portal:ro
     depends_on:
       vault-agent:
         condition: service_started
@@ -858,6 +861,34 @@ services:
     networks:
       - breakpilot-network
 
+  # =========================================================
+  # ADMIN CORE
+  # =========================================================
+  admin-core:
+    build:
+      context: ./admin-core
+      dockerfile: Dockerfile
+      args:
+        NEXT_PUBLIC_API_URL: ${NEXT_PUBLIC_API_URL:-https://macmini:8000}
+    container_name: bp-core-admin
+    platform: linux/arm64
+    expose:
+      - "3000"
+    environment:
+      NODE_ENV: production
+      BACKEND_URL: http://backend-core:8000
+      WOODPECKER_URL: http://bp-core-woodpecker-server:8000
+      WOODPECKER_TOKEN: ${WOODPECKER_TOKEN:-}
+      OLLAMA_URL: ${OLLAMA_URL:-http://host.docker.internal:11434}
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+    volumes:
+      - /var/run/docker.sock:/var/run/docker.sock:ro
+    restart: unless-stopped
+    networks:
+      - breakpilot-network
+
+
   # =========================================================
   # ERP (ERPNext)
   # =========================================================