chore: sync all local changes and new files

- Update next.config.ts
- Add netlify.toml, Docker configs, e2e tests
- Add env templates, docs (README, ROADMAP, TODO)
- Add vitest/playwright test configs
- Add component and lib tests
- Add install script, portainer env template
- Update .gitignore (tsbuildinfo, deno.lock, dev.db)

ROADMAP.md

@@ -0,0 +1,68 @@
+# Falah OS — Roadmap
+
+**Deployment target:** Docker Compose + Komodo (solo-operator)
+**Last updated:** April 13, 2026
+
+---
+
+## v1.3 — Current release
+
+**Theme: Production readiness foundation**
+
+### Completed
+- [x] Netlify serverless API (auth, screening, certificates, products, finance, revocations)
+- [x] Docker Compose stack — Ummah ID, Wallet, RAMZ, Mock-Net, nginx gateway
+- [x] Healthchecks on all containers
+- [x] Komodo deployment config (`komodo.toml`)
+- [x] Makefile with lifecycle commands
+- [x] Postgres init.sql + data layer provisioned (reserved for v1.4)
+- [x] Rate limiting on nginx gateway
+- [x] `.env.example` with all required vars documented
+- [x] Hardcoded secrets removed — required vars fail loudly at startup
+- [x] Documentation system — end-user, admin, developer, wiki, changelog
+- [x] QA checklist and release checklist
+
+### Known gaps (accepted for v1.3)
+- No database persistence (in-memory only — see [Limitations](docs/wiki/limitations.md))
+- No automated tests
+- Frontend source not in repository
+- CORS not restricted by origin on Docker services
+
+---
+
+## v1.4 — Next release
+
+**Theme: Persistence + reliability**
+
+- [ ] Wire Postgres to all 4 core services (ummahid, wallet, ramz, mocknet)
+- [ ] Redis session caching
+- [ ] User management API (create, update, deactivate accounts)
+- [ ] Automated backup schedule via cron
+- [ ] Basic unit tests for Netlify functions (Vitest)
+- [ ] Basic unit tests for Docker services (Jest + supertest)
+- [ ] CORS restricted to configured allowed origins
+- [ ] Structured JSON logging with request IDs
+
+---
+
+## v1.5 — Future
+
+**Theme: Developer experience**
+
+- [ ] Frontend source code in repository (React + Vite + Tailwind)
+- [ ] API versioning and formal deprecation policy
+- [ ] Webhook system for external integrations
+- [ ] Expanded Shariah contract templates
+- [ ] SDK starter kits (JavaScript)
+
+---
+
+## Not in scope
+
+These were in the previous roadmap. They are out of scope for a solo-operator product:
+
+- Kubernetes / Istio / service mesh
+- HashiCorp Vault (use OS secrets or Komodo secret store)
+- Multi-region DR / chaos engineering
+- Horizontal scaling beyond single Docker Compose host
+- Mobile native SDKs (v2.x at earliest)