Initial commit: Port Nimara CRM (Layers 0-4)

Full CRM rebuild with Next.js 15, TypeScript, Tailwind, Drizzle ORM,
PostgreSQL, Redis, BullMQ, MinIO, and Socket.io. Includes 461 source
files covering clients, berths, interests/pipeline, documents/EOI,
expenses/invoices, email, notifications, dashboard, admin, and
client portal. CI/CD via Gitea Actions with Docker builds.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

.husky/pre-commit.bak

@@ -0,0 +1,11 @@
+pnpm exec lint-staged
+# Verify no .env files staged
+if git diff --cached --name-only | grep -qE '\.env($|\.)'; then
+  echo "❌ .env files must not be committed"
+  exit 1
+fi
+# Scan for potential secrets
+if git diff --cached -U0 | grep -qiE '(password|secret|api_key|access_key)\s*[:=]\s*["\x27][A-Za-z0-9+/=]{16,}'; then
+  echo "⚠️  Possible hardcoded secret detected. Review staged changes."
+  exit 1
+fi