add composer-unused, comprehensive docs, and project restructure

- Add icanhazstring/composer-unused as dev dependency for dependency hygiene checks
- Add German documentation (docs/) covering architecture, conventions, workflows, and developer checklists
- Add API layer (ApiAuth, ApiBootstrap, ApiResponse), audit, scheduler, custom fields, and SSO services
- Add Microsoft OIDC SSO, API token management, and user lifecycle features
- Add swagger-ui vendor integration and OpenAPI spec
- Add production Docker setup and bin/ scripts
- Update composer dependencies, config, templates, and frontend assets throughout

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

lib/Repository/Access/UserRoleRepository.php

@@ -39,4 +39,63 @@ class UserRoleRepository
 
         return true;
     }
+
+    public static function countUsersByRoleIds(array $roleIds): array
+    {
+        return self::countByRoleIds($roleIds, false);
+    }
+
+    public static function countActiveUsersByRoleIds(array $roleIds): array
+    {
+        return self::countByRoleIds($roleIds, true);
+    }
+
+    private static function countByRoleIds(array $roleIds, bool $activeOnly): array
+    {
+        $roleIds = array_values(array_unique(array_map('intval', $roleIds)));
+        $roleIds = array_values(array_filter($roleIds, static fn ($id) => $id > 0));
+        if (!$roleIds) {
+            return [];
+        }
+
+        $placeholders = implode(',', array_fill(0, count($roleIds), '?'));
+        $joinUsersSql = $activeOnly ? ' join users u on u.id = ur.user_id and u.active = 1' : '';
+        $rows = DB::select(
+            'select ur.role_id, count(distinct ur.user_id) as user_count from user_roles ur' .
+            $joinUsersSql .
+            ' where ur.role_id in (' . $placeholders . ') group by ur.role_id',
+            ...array_map('strval', $roleIds)
+        );
+
+        if (!is_array($rows)) {
+            return [];
+        }
+
+        $result = [];
+        foreach ($rows as $row) {
+            $roleId = self::extractIntField($row, 'role_id');
+            if ($roleId <= 0) {
+                continue;
+            }
+            $result[$roleId] = self::extractIntField($row, 'user_count');
+        }
+
+        return $result;
+    }
+
+    private static function extractIntField(array $row, string $field): int
+    {
+        foreach ($row as $value) {
+            if (!is_array($value)) {
+                continue;
+            }
+            if (array_key_exists($field, $value)) {
+                return (int) $value[$field];
+            }
+        }
+        if (array_key_exists($field, $row)) {
+            return (int) $row[$field];
+        }
+        return 0;
+    }
 }