docs: rename docs/ -> serverAppConfigs-docs/ per system-wide PROJECTNAME-docs convention

All in-repo path references (AGENTS.md, README, old scripts, report artifacts,
test code paths) rewritten in the same commit; focused-test map extended for
.gitignore, old/scripts/*, dankclaw/comfyui/*, and report/* per this repo's
own convention ('add one before committing'). Obsidian wikilinks are
title-based and unaffected.

serverAppConfigs-docs/Infrastructure/authentik-worker.md

@@ -0,0 +1,14 @@
+# authentik-worker
+
+The Authentik worker — background tasks: event processing, provider
+synchronization, scheduled flows, and certificate renewal. It runs the same
+image as the server; the `command: worker` selects the role.
+
+- **Compose service:** `authentik-worker` (in `dankclaw/compose.yaml`)
+- **Image:** `ghcr.io/goauthentik/server:2026.8.0` (command: `worker`)
+- **Runs as:** `0:0` (rootless: container root maps to the host user that owns the data dir)
+- **Data:** `/home/dank/authentik/data` (bind mount, shared with the server)
+- **No port** — the worker has no HTTP endpoint.
+
+See [Authentik.md](Authentik.md) for the full architecture, setup, and failure
+modes.