fix: Restore all files lost during destructive rebase

A previous `git pull --rebase origin main` dropped 177 local commits,
losing 3400+ files across admin-v2, backend, studio-v2, website,
klausur-service, and many other services. The partial restore attempt
(660295e2) only recovered some files.

This commit restores all missing files from pre-rebase ref 98933f5e
while preserving post-rebase additions (night-scheduler, night-mode UI,
NightModeWidget dashboard integration).

Restored features include:
- AI Module Sidebar (FAB), OCR Labeling, OCR Compare
- GPU Dashboard, RAG Pipeline, Magic Help
- Klausur-Korrektur (8 files), Abitur-Archiv (5+ files)
- Companion, Zeugnisse-Crawler, Screen Flow
- Full backend, studio-v2, website, klausur-service
- All compliance SDKs, agent-core, voice-service
- CI/CD configs, documentation, scripts

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

gitea/runner-config.yaml

@@ -0,0 +1,46 @@
+# Gitea Actions Runner Configuration
+# Documentation: https://docs.gitea.com/usage/actions/act-runner
+
+log:
+  level: info
+
+runner:
+  # File to store the registration token
+  file: .runner
+  # Capacity for parallel jobs
+  capacity: 2
+  # Environment variables for all jobs
+  envs:
+    DOCKER_HOST: unix:///var/run/docker.sock
+  # Timeout for job execution (1 hour)
+  timeout: 1h
+  # Labels for the runner
+  labels:
+    - "ubuntu-latest:docker://node:20-bookworm"
+    - "ubuntu-22.04:docker://ubuntu:22.04"
+    - "self-hosted:host"
+
+cache:
+  enabled: true
+  dir: ""
+  # Cache expiration time
+  host: ""
+  port: 0
+
+container:
+  # Container network mode
+  network: "bridge"
+  # Privileged mode (needed for some Docker operations)
+  privileged: false
+  # Docker socket path
+  docker_host: ""
+  # Force pull images
+  force_pull: false
+  # Valid volumes that can be mounted
+  valid_volumes:
+    - "/var/run/docker.sock"
+    - "**"
+
+host:
+  # Workdir for the runner when using host mode
+  workdir_parent: ""