add composer-unused, comprehensive docs, and project restructure

- Add icanhazstring/composer-unused as dev dependency for dependency hygiene checks
- Add German documentation (docs/) covering architecture, conventions, workflows, and developer checklists
- Add API layer (ApiAuth, ApiBootstrap, ApiResponse), audit, scheduler, custom fields, and SSO services
- Add Microsoft OIDC SSO, API token management, and user lifecycle features
- Add swagger-ui vendor integration and OpenAPI spec
- Add production Docker setup and bin/ scripts
- Update composer dependencies, config, templates, and frontend assets throughout

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

lib/Repository/Access/RolePermissionRepository.php

@@ -22,6 +22,38 @@ class RolePermissionRepository
         return array_values(array_unique($ids));
     }
 
+    public static function countPermissionsByRoleIds(array $roleIds): array
+    {
+        $roleIds = array_values(array_unique(array_map('intval', $roleIds)));
+        $roleIds = array_values(array_filter($roleIds, static fn ($id) => $id > 0));
+        if (!$roleIds) {
+            return [];
+        }
+
+        $placeholders = implode(',', array_fill(0, count($roleIds), '?'));
+        $rows = DB::select(
+            'select rp.role_id, count(distinct rp.permission_id) as permission_count from role_permissions rp where rp.role_id in (' .
+            $placeholders .
+            ') group by rp.role_id',
+            ...array_map('strval', $roleIds)
+        );
+
+        if (!is_array($rows)) {
+            return [];
+        }
+
+        $result = [];
+        foreach ($rows as $row) {
+            $roleId = self::extractIntField($row, 'role_id');
+            if ($roleId <= 0) {
+                continue;
+            }
+            $result[$roleId] = self::extractIntField($row, 'permission_count');
+        }
+
+        return $result;
+    }
+
     public static function replaceForRole(int $roleId, array $permissionIds): bool
     {
         DB::delete('delete from role_permissions where role_id = ?', (string) $roleId);
@@ -123,27 +155,43 @@ class RolePermissionRepository
             $rowRp = $row['rp'] ?? ($row['role_permissions'] ?? $row);
 
             $permId = $rowRp['permission_id'] ?? ($row['permission_id'] ?? null);
-            $key = (string) (($rowPerm['key'] ?? $row['key'] ?? '') ?? '');
+            $key = (string) ($rowPerm['key'] ?? $row['key'] ?? '');
             if ($permId === null || $key === '') {
                 continue;
             }
             if (!isset($permMap[$permId])) {
-                $desc = (string) (($rowPerm['description'] ?? $row['description'] ?? '') ?? '');
+                $desc = (string) ($rowPerm['description'] ?? $row['description'] ?? '');
                 $permMap[$permId] = [
                     'key' => $key,
                     'description' => $desc,
                     'roles' => [],
                 ];
             }
-            $roleLabel = (string) (($rowRole['description'] ?? $rowRole['role'] ?? $row['role'] ?? '') ?? '');
+            $roleLabel = (string) ($rowRole['description'] ?? $rowRole['role'] ?? $row['role'] ?? '');
             if ($roleLabel !== '') {
                 $permMap[$permId]['roles'][] = $roleLabel;
             }
         }
         foreach ($permMap as &$item) {
-            $item['roles'] = array_values(array_unique($item['roles'] ?? []));
+            $item['roles'] = array_values(array_unique($item['roles']));
         }
         unset($item);
         return array_values($permMap);
     }
+
+    private static function extractIntField(array $row, string $field): int
+    {
+        foreach ($row as $value) {
+            if (!is_array($value)) {
+                continue;
+            }
+            if (array_key_exists($field, $value)) {
+                return (int) $value[$field];
+            }
+        }
+        if (array_key_exists($field, $row)) {
+            return (int) $row[$field];
+        }
+        return 0;
+    }
 }

lib/Repository/Access/RoleRepository.php

@@ -46,6 +46,22 @@ class RoleRepository
         return self::unwrapList($rows);
     }
 
+    public static function listByIds(array $roleIds): array
+    {
+        $roleIds = array_values(array_unique(array_map('intval', $roleIds)));
+        $roleIds = array_values(array_filter($roleIds, static fn ($id) => $id > 0));
+        if (!$roleIds) {
+            return [];
+        }
+
+        $placeholders = implode(',', array_fill(0, count($roleIds), '?'));
+        $rows = DB::select(
+            'select id, uuid, description, code, active, created_by, modified_by, created, modified from roles where id in (' . $placeholders . ')',
+            ...array_map('strval', $roleIds)
+        );
+        return self::unwrapList($rows);
+    }
+
     public static function listIds(): array
     {
         $rows = DB::select('select id from roles');
@@ -143,19 +159,11 @@ class RoleRepository
         return $count ? ((int) $count > 0) : false;
     }
 
-    private static function uuidV4(): string
-    {
-        $data = random_bytes(16);
-        $data[6] = chr((ord($data[6]) & 0x0f) | 0x40);
-        $data[8] = chr((ord($data[8]) & 0x3f) | 0x80);
-        return vsprintf('%s%s-%s-%s-%s-%s%s%s', str_split(bin2hex($data), 4));
-    }
-
     public static function create(array $data)
     {
         return DB::insert(
             'insert into roles (uuid, description, code, active, created_by, created) values (?,?,?,?,?,NOW())',
-            $data['uuid'] ?? self::uuidV4(),
+            $data['uuid'] ?? RepoQuery::uuidV4(),
             $data['description'],
             $data['code'] ?? null,
             $data['active'] ?? 1,

lib/Repository/Access/UserRoleRepository.php

@@ -39,4 +39,63 @@ class UserRoleRepository
 
         return true;
     }
+
+    public static function countUsersByRoleIds(array $roleIds): array
+    {
+        return self::countByRoleIds($roleIds, false);
+    }
+
+    public static function countActiveUsersByRoleIds(array $roleIds): array
+    {
+        return self::countByRoleIds($roleIds, true);
+    }
+
+    private static function countByRoleIds(array $roleIds, bool $activeOnly): array
+    {
+        $roleIds = array_values(array_unique(array_map('intval', $roleIds)));
+        $roleIds = array_values(array_filter($roleIds, static fn ($id) => $id > 0));
+        if (!$roleIds) {
+            return [];
+        }
+
+        $placeholders = implode(',', array_fill(0, count($roleIds), '?'));
+        $joinUsersSql = $activeOnly ? ' join users u on u.id = ur.user_id and u.active = 1' : '';
+        $rows = DB::select(
+            'select ur.role_id, count(distinct ur.user_id) as user_count from user_roles ur' .
+            $joinUsersSql .
+            ' where ur.role_id in (' . $placeholders . ') group by ur.role_id',
+            ...array_map('strval', $roleIds)
+        );
+
+        if (!is_array($rows)) {
+            return [];
+        }
+
+        $result = [];
+        foreach ($rows as $row) {
+            $roleId = self::extractIntField($row, 'role_id');
+            if ($roleId <= 0) {
+                continue;
+            }
+            $result[$roleId] = self::extractIntField($row, 'user_count');
+        }
+
+        return $result;
+    }
+
+    private static function extractIntField(array $row, string $field): int
+    {
+        foreach ($row as $value) {
+            if (!is_array($value)) {
+                continue;
+            }
+            if (array_key_exists($field, $value)) {
+                return (int) $value[$field];
+            }
+        }
+        if (array_key_exists($field, $row)) {
+            return (int) $row[$field];
+        }
+        return 0;
+    }
 }