Initial commit: breakpilot-core - Shared Infrastructure

Docker Compose with 24+ services:
- PostgreSQL (PostGIS), Valkey, MinIO, Qdrant
- Vault (PKI/TLS), Nginx (Reverse Proxy)
- Backend Core API, Consent Service, Billing Service
- RAG Service, Embedding Service
- Gitea, Woodpecker CI/CD
- Night Scheduler, Health Aggregator
- Jitsi (Web/XMPP/JVB/Jicofo), Mailpit

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

.claude/CLAUDE.md

@@ -0,0 +1,65 @@
+# BreakPilot Core — Shared Infrastructure
+
+## Entwicklungsumgebung
+
+### Zwei-Rechner-Setup
+| Gerät | Rolle |
+|-------|-------|
+| **MacBook** | Client/Terminal |
+| **Mac Mini** | Server/Docker/Git |
+
+```bash
+ssh macmini "cd /Users/benjaminadmin/Projekte/breakpilot-core && <cmd>"
+```
+
+## Projektübersicht
+
+**breakpilot-core** ist das Infrastruktur-Projekt der BreakPilot-Plattform. Es stellt alle gemeinsamen Services bereit, die von **breakpilot-lehrer** und **breakpilot-compliance** genutzt werden.
+
+### Enthaltene Services (~28 Container)
+
+| Service | Port | Beschreibung |
+|---------|------|--------------|
+| nginx | 80/443 | Reverse Proxy (SSL) |
+| postgres | 5432 | PostGIS 16 (3 Schemas: core, lehrer, compliance) |
+| valkey | 6379 | Session-Cache |
+| vault | 8200 | Secrets Management |
+| qdrant | 6333 | Vektordatenbank |
+| minio | 9000 | S3 Storage |
+| backend-core | 8000 | Shared APIs (Auth, RBAC, Notifications) |
+| rag-service | 8097 | RAG: Dokumente, Suche, Embeddings |
+| embedding-service | 8087 | Text-Embeddings |
+| consent-service | 8081 | Consent-Management |
+| health-aggregator | 8099 | Health-Check aller Services |
+| gitea | 3003 | Git-Server |
+| woodpecker | 8090 | CI/CD |
+| camunda | 8089 | BPMN |
+| synapse | 8008 | Matrix Chat |
+| jitsi | 8443 | Video |
+| mailpit | 8025 | E-Mail (Dev) |
+
+### Docker-Netzwerk
+Alle 3 Projekte teilen sich das `breakpilot-network`:
+```yaml
+networks:
+  breakpilot-network:
+    driver: bridge
+    name: breakpilot-network
+```
+
+### Start-Reihenfolge
+```bash
+# 1. Core MUSS zuerst starten
+docker compose up -d
+# 2. Dann Lehrer und Compliance (warten auf Core Health)
+```
+
+### DB-Schemas
+- `core` — users, sessions, auth, rbac, notifications
+- `lehrer` — classroom, units, klausuren, game
+- `compliance` — compliance, dsr, gdpr, sdk
+
+## Git Remotes
+Immer zu BEIDEN pushen:
+- `origin`: lokale Gitea (macmini:3003)
+- `gitea`: gitea.meghsakha.com