docs: rename docs/ -> serverAppConfigs-docs/ per system-wide PROJECTNAME-docs convention

All in-repo path references (AGENTS.md, README, old scripts, report artifacts,
test code paths) rewritten in the same commit; focused-test map extended for
.gitignore, old/scripts/*, dankclaw/comfyui/*, and report/* per this repo's
own convention ('add one before committing'). Obsidian wikilinks are
title-based and unaffected.

serverAppConfigs-docs/Infrastructure/authentik-server.md

@@ -0,0 +1,15 @@
+# authentik-server
+
+The Authentik server — the core, the admin API, and the embedded Caddy outpost.
+This is the service the Caddy `forward_auth` vhosts proxy to
+(`authentik-server:9000`). It also serves the login page at
+`https://auth.franksdank.cloud`.
+
+- **Compose service:** `authentik-server` (in `dankclaw/compose.yaml`)
+- **Image:** `ghcr.io/goauthentik/server:2026.8.0` (command: `server`)
+- **Port:** `9000` (published; the outpost + admin + login all live here)
+- **Data:** `/home/dank/authentik/data` (bind mount, shared with the worker)
+- **Health:** `http://localhost:9000/-/health/`
+
+See [Authentik.md](Authentik.md) for the full architecture, the Caddy
+forward_auth pattern, first-time setup, and failure modes.