add composer-unused, comprehensive docs, and project restructure

- Add icanhazstring/composer-unused as dev dependency for dependency hygiene checks
- Add German documentation (docs/) covering architecture, conventions, workflows, and developer checklists
- Add API layer (ApiAuth, ApiBootstrap, ApiResponse), audit, scheduler, custom fields, and SSO services
- Add Microsoft OIDC SSO, API token management, and user lifecycle features
- Add swagger-ui vendor integration and OpenAPI spec
- Add production Docker setup and bin/ scripts
- Update composer dependencies, config, templates, and frontend assets throughout

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

lib/Repository/Access/RoleRepository.php

@@ -46,6 +46,22 @@ class RoleRepository
         return self::unwrapList($rows);
     }
 
+    public static function listByIds(array $roleIds): array
+    {
+        $roleIds = array_values(array_unique(array_map('intval', $roleIds)));
+        $roleIds = array_values(array_filter($roleIds, static fn ($id) => $id > 0));
+        if (!$roleIds) {
+            return [];
+        }
+
+        $placeholders = implode(',', array_fill(0, count($roleIds), '?'));
+        $rows = DB::select(
+            'select id, uuid, description, code, active, created_by, modified_by, created, modified from roles where id in (' . $placeholders . ')',
+            ...array_map('strval', $roleIds)
+        );
+        return self::unwrapList($rows);
+    }
+
     public static function listIds(): array
     {
         $rows = DB::select('select id from roles');
@@ -143,19 +159,11 @@ class RoleRepository
         return $count ? ((int) $count > 0) : false;
     }
 
-    private static function uuidV4(): string
-    {
-        $data = random_bytes(16);
-        $data[6] = chr((ord($data[6]) & 0x0f) | 0x40);
-        $data[8] = chr((ord($data[8]) & 0x3f) | 0x80);
-        return vsprintf('%s%s-%s-%s-%s-%s%s%s', str_split(bin2hex($data), 4));
-    }
-
     public static function create(array $data)
     {
         return DB::insert(
             'insert into roles (uuid, description, code, active, created_by, created) values (?,?,?,?,?,NOW())',
-            $data['uuid'] ?? self::uuidV4(),
+            $data['uuid'] ?? RepoQuery::uuidV4(),
             $data['description'],
             $data['code'] ?? null,
             $data['active'] ?? 1,