chore: sync all local changes and new files

- Update next.config.ts
- Add netlify.toml, Docker configs, e2e tests
- Add env templates, docs (README, ROADMAP, TODO)
- Add vitest/playwright test configs
- Add component and lib tests
- Add install script, portainer env template
- Update .gitignore (tsbuildinfo, deno.lock, dev.db)

TODO.md

@@ -0,0 +1,148 @@
+# Falah OS v1.3 Production - Implementation Tasks
+
+## Phase 1: Core Infrastructure (Weeks 1-2)
+
+### Week 1: Database & Redis HA
+- [ ] Create `docker-compose.ha.yml` with PostgreSQL replicas
+- [ ] Set up streaming replication configuration
+- [ ] Configure pgBouncer for connection pooling
+- [ ] Set up Redis Sentinel for automatic failover
+- [ ] Configure Redis persistence (AOF + RDB)
+- [ ] Create backup script with S3/GCS upload
+- [ ] Set up automated daily backup schedule (cron)
+- [ ] Test failover scenarios
+
+### Week 2: Load Balancing & Service Mesh
+- [ ] Install Traefik/HAProxy
+- [ ] Configure SSL termination
+- [ ] Set up health checks for all services
+- [ ] Configure upstream routing
+- [ ] (Optional) Install Istio
+- [ ] Configure mTLS between services
+- [ ] Update docker-compose.yml with new infrastructure
+
+## Phase 2: Observability (Weeks 2-3)
+
+### Week 2: Metrics & Logging
+- [ ] Deploy Prometheus
+- [ ] Create service exporters (Node, PostgreSQL, Redis)
+- [ ] Build Grafana dashboards (system, API, business)
+- [ ] Deploy Loki for log aggregation
+- [ ] Implement trace ID propagation
+- [ ] Configure log retention policies
+- [ ] Set up error alerting
+
+### Week 3: Alerting & Tracing
+- [ ] Configure Prometheus Alertmanager
+- [ ] Set up notification channels (email, Slack)
+- [ ] Implement on-call rotation
+- [ ] Deploy OpenTelemetry collectors
+- [ ] Set up Jaeger for tracing
+- [ ] Document runbooks for common alerts
+
+## Phase 3: Security (Weeks 3-4)
+
+### Week 3: Secrets & Network
+- [ ] Deploy HashiCorp Vault
+- [ ] Configure dynamic database credentials
+- [ ] Migrate all secrets to Vault
+- [ ] Implement volume encryption
+- [ ] Deploy WAF (ModSecurity/Cloudflare)
+- [ ] Configure network policies
+
+### Week 4: Audit & Compliance
+- [ ] Implement immutable audit logging
+- [ ] Create transaction audit trail
+- [ ] Run dependency vulnerability scan (Trivy)
+- [ ] Scan all Docker images for CVEs
+- [ ] Conduct penetration testing
+- [ ] Document compliance controls
+
+## Phase 4: Reliability (Weeks 4-5)
+
+### Week 4: Disaster Recovery
+- [ ] Design multi-region architecture
+- [ ] Create DR automation scripts
+- [ ] Document RTO/RPO procedures
+- [ ] Test failover to DR region
+- [ ] Verify backup restoration
+
+### Week 5: Chaos & Resilience
+- [ ] Deploy Chaos Mesh
+- [ ] Create failure injection scenarios
+- [ ] Implement circuit breakers
+- [ ] Add retry with exponential backoff
+- [ ] Set up dead letter queues
+- [ ] Run first Game Day exercise
+
+## Phase 5: Performance (Weeks 5-6)
+
+### Week 5: Caching & Optimization
+- [ ] Integrate CDN (Cloudflare/Fastly)
+- [ ] Implement Redis API caching
+- [ ] Enable HTTP/2 on nginx
+- [ ] Configure response compression
+- [ ] Optimize PostgreSQL queries
+- [ ] Add indexes for common queries
+
+### Week 6: Load Testing & Launch
+- [ ] Write k6 load test scenarios
+- [ ] Run baseline performance tests
+- [ ] Conduct stress testing
+- [ ] Define performance budgets
+- [ ] Finalize SLA documentation
+- [ ] Production go-live
+
+---
+
+## Documentation Tasks
+- [ ] Update architecture diagrams
+- [ ] Create deployment runbooks
+- [ ] Document API references
+- [ ] Write security policies
+- [ ] Create user guides
+
+## Testing Tasks
+- [ ] Unit tests for all services
+- [ ] Integration tests for API Gateway
+- [ ] E2E tests for critical paths
+- [ ] Performance benchmarks
+- [ ] Security penetration tests
+
+---
+
+## New Features (If Time Permits)
+- [ ] Multi-tenant isolation
+- [ ] API versioning implementation
+- [ ] Webhook system
+- [ ] Plugin system design
+- [ ] Mobile SDKs (iOS/Android)
+
+---
+
+## Dependencies
+
+### External Services Needed
+- S3/GCS bucket for backups
+- CDN provider (Cloudflare/Fastly)
+- Monitoring domain
+- SSL certificates (Let's Encrypt)
+- Email service for alerts (SendGrid/SES)
+- PagerDuty/OpsGenie for on-call
+
+### Tools Required
+- k6 (load testing)
+- Trivy (container scanning)
+- Chaos Mesh (chaos engineering)
+- Vault (secrets management)
+- Prometheus/Grafana (monitoring)
+- Loki (logging)
+- Jaeger (tracing)
+
+---
+
+## Notes
+- All critical (P0) tasks must complete before production launch
+- P1 tasks should complete within 2 weeks of launch
+- P2 tasks are optional for v1.3
+- Review progress weekly with stakeholders