feat: MyEasyCMS v2 — Full SaaS rebuild

Complete rebuild of 22-year-old PHP CMS as modern SaaS:

Database (15 migrations, 42+ tables):
- Foundation: account_settings, audit_log, GDPR register, cms_files
- Module Engine: modules, fields, records, permissions, relations + RPC
- Members: 45+ field member profiles, departments, roles, honors, SEPA mandates
- Courses: courses, sessions, categories, instructors, locations, attendance
- Bookings: rooms, guests, bookings with availability
- Events: events, registrations, holiday passes
- Finance: SEPA batches/items (pain.008/001 XML), invoices
- Newsletter: campaigns, templates, recipients, subscriptions
- Site Builder: site_pages (Puck JSON), site_settings, cms_posts
- Portal Auth: member_portal_invitations, user linking

Feature Packages (9):
- @kit/module-builder — dynamic low-code CRUD engine
- @kit/member-management — 31 API methods, 21 actions, 8 components
- @kit/course-management, @kit/booking-management, @kit/event-management
- @kit/finance — SEPA XML generator + IBAN validator
- @kit/newsletter — campaigns + dispatch
- @kit/document-generator — PDF/Excel/Word
- @kit/site-builder — Puck visual editor, 15 blocks, public rendering

Pages (60+):
- Dashboard with real stats from all APIs
- Full CRUD for all 8 domains with react-hook-form + Zod
- Recharts statistics
- German i18n throughout
- Member portal with auth + invitation system
- Public club websites via Puck at /club/[slug]

Infrastructure:
- Dockerfile (multi-stage, standalone output)
- docker-compose.yml (Supabase self-hosted + Next.js)
- Kong API gateway config
- .env.production.example

apps/web/app/[locale]/club/[slug]/page.tsx

@@ -0,0 +1,34 @@
+import { createClient } from '@supabase/supabase-js';
+import { notFound } from 'next/navigation';
+import { SiteRenderer } from '@kit/site-builder/components';
+
+interface Props { params: Promise<{ slug: string }> }
+
+export default async function ClubHomePage({ params }: Props) {
+  const { slug } = await params;
+
+  // Use anon client for public access
+  const supabase = createClient(
+    process.env.NEXT_PUBLIC_SUPABASE_URL!,
+    process.env.NEXT_PUBLIC_SUPABASE_PUBLIC_KEY!,
+  );
+
+  // Resolve slug → account
+  const { data: account } = await supabase.from('accounts').select('id, name').eq('slug', slug).single();
+  if (!account) notFound();
+
+  // Check site is public
+  const { data: settings } = await supabase.from('site_settings').select('*').eq('account_id', account.id).eq('is_public', true).maybeSingle();
+  if (!settings) notFound();
+
+  // Get homepage
+  const { data: page } = await supabase.from('site_pages').select('*')
+    .eq('account_id', account.id).eq('is_homepage', true).eq('is_published', true).maybeSingle();
+  if (!page) notFound();
+
+  return (
+    <div style={{ '--primary': settings.primary_color, '--secondary': settings.secondary_color, fontFamily: settings.font_family } as React.CSSProperties}>
+      <SiteRenderer data={(page.puck_data ?? {}) as Record<string, unknown>} />
+    </div>
+  );
+}