fix: Restore all files lost during destructive rebase

A previous `git pull --rebase origin main` dropped 177 local commits,
losing 3400+ files across admin-v2, backend, studio-v2, website,
klausur-service, and many other services. The partial restore attempt
(660295e2) only recovered some files.

This commit restores all missing files from pre-rebase ref 98933f5e
while preserving post-rebase additions (night-scheduler, night-mode UI,
NightModeWidget dashboard integration).

Restored features include:
- AI Module Sidebar (FAB), OCR Labeling, OCR Compare
- GPU Dashboard, RAG Pipeline, Magic Help
- Klausur-Korrektur (8 files), Abitur-Archiv (5+ files)
- Companion, Zeugnisse-Crawler, Screen Flow
- Full backend, studio-v2, website, klausur-service
- All compliance SDKs, agent-core, voice-service
- CI/CD configs, documentation, scripts

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

admin-v2/app/(admin)/development/workflow/page.tsx

@@ -19,7 +19,8 @@ import {
   Eye,
   Download,
   AlertTriangle,
-  Info
+  Info,
+  Container
 } from 'lucide-react'
 
 interface WorkflowStep {
@@ -88,6 +89,14 @@ export default function WorkflowPage() {
     },
     {
       id: 6,
+      title: 'Integration Tests',
+      description: 'Docker Compose Test-Umgebung mit Backend, DB und Consent-Service fuer vollstaendige E2E-Tests.',
+      command: 'docker compose -f docker-compose.test.yml up -d',
+      icon: <Container className="h-6 w-6" />,
+      location: 'macmini'
+    },
+    {
+      id: 7,
       title: 'Frontend testen',
       description: 'Teste die Änderungen im Browser auf dem Mac Mini.',
       command: 'http://macmini:3000',
@@ -158,8 +167,8 @@ export default function WorkflowPage() {
                 <span>Browser für Frontend-Tests</span>
               </li>
               <li className="flex items-center gap-2">
-                <CheckCircle2 className="h-4 w-4 text-green-500" />
-                <span>Tägliches Backup (automatisch)</span>
+                <AlertTriangle className="h-4 w-4 text-amber-500" />
+                <span>Backup manuell (MacBook nachts aus)</span>
               </li>
             </ul>
           </div>
@@ -192,6 +201,10 @@ export default function WorkflowPage() {
                 <CheckCircle2 className="h-4 w-4 text-green-500" />
                 <span>PostgreSQL Datenbank</span>
               </li>
+              <li className="flex items-center gap-2">
+                <CheckCircle2 className="h-4 w-4 text-green-500" />
+                <span>Automatisches Backup (02:00 Uhr lokal)</span>
+              </li>
             </ul>
           </div>
         </div>
@@ -314,17 +327,18 @@ export default function WorkflowPage() {
           Backup & Sicherheit
         </h2>
 
-        <div className="grid grid-cols-1 md:grid-cols-2 gap-6">
+        <div className="grid grid-cols-1 md:grid-cols-3 gap-6">
+          {/* Mac Mini - Automatisches lokales Backup */}
           <div className="bg-green-50 rounded-xl p-5 border border-green-200">
             <div className="flex items-center gap-3 mb-3">
               <Clock className="h-5 w-5 text-green-600" />
-              <h3 className="font-semibold text-green-900">Tägliches Backup</h3>
+              <h3 className="font-semibold text-green-900">Mac Mini (Auto)</h3>
             </div>
             <ul className="space-y-2 text-sm text-green-800">
-              <li>• Läuft automatisch um 02:00 Uhr</li>
-              <li>• Git Repository wird synchronisiert</li>
-              <li>• PostgreSQL-Dump wird erstellt</li>
-              <li>• Backups werden 7 Tage aufbewahrt</li>
+              <li>• Automatisch um 02:00 Uhr</li>
+              <li>• PostgreSQL-Dump lokal</li>
+              <li>• Git Repository gesichert</li>
+              <li>• 7 Tage Aufbewahrung</li>
             </ul>
             <div className="mt-4 p-3 bg-green-100 rounded-lg">
               <code className="text-xs text-green-700 font-mono">
@@ -333,10 +347,29 @@ export default function WorkflowPage() {
             </div>
           </div>
 
+          {/* MacBook - Manuelles Backup */}
+          <div className="bg-amber-50 rounded-xl p-5 border border-amber-200">
+            <div className="flex items-center gap-3 mb-3">
+              <AlertTriangle className="h-5 w-5 text-amber-600" />
+              <h3 className="font-semibold text-amber-900">MacBook (Manuell)</h3>
+            </div>
+            <ul className="space-y-2 text-sm text-amber-800">
+              <li>• MacBook nachts aus (02:00)</li>
+              <li>• Keine Auto-Synchronisation</li>
+              <li>• Backup manuell anstoßen</li>
+            </ul>
+            <div className="mt-4 p-3 bg-amber-100 rounded-lg">
+              <code className="text-xs text-amber-700 font-mono">
+                rsync -avz macmini:~/Projekte/ ~/Projekte/
+              </code>
+            </div>
+          </div>
+
+          {/* Manuelles Backup starten */}
           <div className="bg-blue-50 rounded-xl p-5 border border-blue-200">
             <div className="flex items-center gap-3 mb-3">
               <Download className="h-5 w-5 text-blue-600" />
-              <h3 className="font-semibold text-blue-900">Manuelles Backup</h3>
+              <h3 className="font-semibold text-blue-900">Backup Script</h3>
             </div>
             <p className="text-sm text-blue-800 mb-3">
               Backup jederzeit manuell starten:
@@ -490,6 +523,118 @@ export default function WorkflowPage() {
         </div>
       </div>
 
+      {/* CI/CD Infrastruktur - Automatisierte OAuth Integration */}
+      <div className="bg-white rounded-xl border border-slate-200 p-6">
+        <h2 className="text-xl font-semibold text-slate-900 mb-4 flex items-center gap-2">
+          <Shield className="h-5 w-5 text-indigo-600" />
+          CI/CD Infrastruktur (Automatisiert)
+        </h2>
+
+        <div className="bg-blue-50 rounded-xl p-4 mb-6 border border-blue-200">
+          <div className="flex items-start gap-3">
+            <Info className="h-5 w-5 text-blue-600 flex-shrink-0 mt-0.5" />
+            <div>
+              <h4 className="font-medium text-blue-900">Warum automatisiert?</h4>
+              <p className="text-sm text-blue-800 mt-1">
+                Die OAuth-Integration zwischen Woodpecker und Gitea ist vollautomatisiert.
+                Dies ist eine DevSecOps Best Practice: Credentials werden in HashiCorp Vault gespeichert
+                und können bei Bedarf automatisch regeneriert werden.
+              </p>
+            </div>
+          </div>
+        </div>
+
+        <div className="grid grid-cols-1 lg:grid-cols-2 gap-6">
+          {/* Architektur */}
+          <div className="bg-slate-50 rounded-xl p-5 border border-slate-200">
+            <h3 className="font-semibold text-slate-900 mb-3">Architektur</h3>
+            <div className="space-y-3 text-sm">
+              <div className="flex items-center gap-3 p-2 bg-white rounded-lg border">
+                <div className="w-3 h-3 bg-green-500 rounded-full" />
+                <span className="font-medium">Gitea</span>
+                <span className="text-slate-500">Port 3003</span>
+                <span className="text-xs text-slate-400 ml-auto">Git Server</span>
+              </div>
+              <div className="flex items-center justify-center">
+                <ArrowRight className="h-4 w-4 text-slate-400 rotate-90" />
+                <span className="text-xs text-slate-500 ml-2">OAuth 2.0</span>
+              </div>
+              <div className="flex items-center gap-3 p-2 bg-white rounded-lg border">
+                <div className="w-3 h-3 bg-blue-500 rounded-full" />
+                <span className="font-medium">Woodpecker</span>
+                <span className="text-slate-500">Port 8090</span>
+                <span className="text-xs text-slate-400 ml-auto">CI/CD Server</span>
+              </div>
+              <div className="flex items-center justify-center">
+                <ArrowRight className="h-4 w-4 text-slate-400 rotate-90" />
+                <span className="text-xs text-slate-500 ml-2">Credentials</span>
+              </div>
+              <div className="flex items-center gap-3 p-2 bg-white rounded-lg border">
+                <div className="w-3 h-3 bg-purple-500 rounded-full" />
+                <span className="font-medium">Vault</span>
+                <span className="text-slate-500">Port 8200</span>
+                <span className="text-xs text-slate-400 ml-auto">Secrets Manager</span>
+              </div>
+            </div>
+          </div>
+
+          {/* Credentials Speicherort */}
+          <div className="bg-slate-50 rounded-xl p-5 border border-slate-200">
+            <h3 className="font-semibold text-slate-900 mb-3">Credentials Speicherorte</h3>
+            <div className="space-y-3 text-sm">
+              <div className="p-3 bg-white rounded-lg border">
+                <div className="flex items-center gap-2 mb-1">
+                  <Database className="h-4 w-4 text-purple-500" />
+                  <span className="font-medium">HashiCorp Vault</span>
+                </div>
+                <code className="text-xs bg-slate-100 px-2 py-1 rounded">
+                  secret/cicd/woodpecker
+                </code>
+                <p className="text-xs text-slate-500 mt-1">Client ID + Secret (Quelle der Wahrheit)</p>
+              </div>
+              <div className="p-3 bg-white rounded-lg border">
+                <div className="flex items-center gap-2 mb-1">
+                  <FileCode className="h-4 w-4 text-blue-500" />
+                  <span className="font-medium">.env Datei</span>
+                </div>
+                <code className="text-xs bg-slate-100 px-2 py-1 rounded">
+                  WOODPECKER_GITEA_CLIENT/SECRET
+                </code>
+                <p className="text-xs text-slate-500 mt-1">Für Docker Compose (aus Vault geladen)</p>
+              </div>
+              <div className="p-3 bg-white rounded-lg border">
+                <div className="flex items-center gap-2 mb-1">
+                  <Database className="h-4 w-4 text-green-500" />
+                  <span className="font-medium">Gitea PostgreSQL</span>
+                </div>
+                <code className="text-xs bg-slate-100 px-2 py-1 rounded">
+                  oauth2_application
+                </code>
+                <p className="text-xs text-slate-500 mt-1">OAuth App Registration (gehashtes Secret)</p>
+              </div>
+            </div>
+          </div>
+        </div>
+
+        {/* Troubleshooting */}
+        <div className="mt-6 bg-amber-50 rounded-xl p-5 border border-amber-200">
+          <h3 className="font-semibold text-amber-900 mb-3 flex items-center gap-2">
+            <AlertTriangle className="h-5 w-5 text-amber-600" />
+            Troubleshooting: OAuth Fehler beheben
+          </h3>
+          <p className="text-sm text-amber-800 mb-3">
+            Falls der Fehler &quot;Client ID not registered&quot; oder &quot;user does not exist&quot; auftritt:
+          </p>
+          <div className="bg-slate-800 rounded-lg p-4 font-mono text-sm">
+            <p className="text-slate-400"># Credentials automatisch regenerieren</p>
+            <p className="text-green-400">./scripts/sync-woodpecker-credentials.sh --regenerate</p>
+            <p className="text-slate-400 mt-2"># Oder manuell: Vault → Gitea → .env → Restart</p>
+            <p className="text-green-400">rsync .env macmini:~/Projekte/breakpilot-pwa/</p>
+            <p className="text-green-400">ssh macmini &quot;cd ~/Projekte/breakpilot-pwa && docker compose up -d --force-recreate woodpecker-server&quot;</p>
+          </div>
+        </div>
+      </div>
+
       {/* Team Members Info */}
       <div className="bg-white rounded-xl border border-slate-200 p-6">
         <h2 className="text-xl font-semibold text-slate-900 mb-4 flex items-center gap-2">