chore(macmini): Föderations-Backbone + verein.mana.how + Nutriphi/Cardecky einspielen

Mac-Mini-Drift in Source-Control bringen — war seit 2026-05-08 live
auf dem Server, aber uncommitted (während des managarten-Renames via
stash gerettet).

Cloudflared-Tunnel:
- verein.mana.how → :3088 (Verein-Landing, live seit 2026-05-09)
- share.mana.how → :3072 (Föderations-Share-Service, Phase F)
- mcp.mana.how → :3069 (MCP-Gateway, exposing tool-registry)
- cardecky-api.mana.how → :3191 (Port-Korrektur, war fälschlich :3072)
- cardecky.mana.how → :5181 (Port-Korrektur, war :5180)
- nutriphi.mana.how → :3087, nutriphi-api.mana.how → :3086

docker-compose.macmini.yml:
- mana-auth CORS_ORIGINS: nutriphi.mana.how + nutriphi-api.mana.how
- Neuer Service mana-share (Build aus ../mana/services/mana-share,
  Föderations-Backbone Phase F, Port 3072, eigene DB-Tabellen in
  mana_platform)
- Neuer Service mana-mcp (Build aus ../mana/services/mana-mcp,
  MCP-Gateway, Port 3069)

Beide Services bauen aus dem mana-platform-Repo (../mana/services/...),
nicht aus managarten — managarten orchestriert nur via Compose.

cloudflared-config.yml

@@ -40,6 +40,8 @@ ingress:
   # the matching module surface. mana.how itself is the dashboard.
   - hostname: mana.how
     service: http://localhost:5000
+  - hostname: verein.mana.how
+    service: http://localhost:3088
   - hostname: chat.mana.how
     service: http://localhost:5000
   - hostname: todo.mana.how
@@ -60,7 +62,7 @@ ingress:
   # Was pointed at :5000 (the unified mana-web) until the standalone spinoff
   # landed. mana.how/cards still serves the in-mana cards module.
   - hostname: cardecky.mana.how
-    service: http://localhost:5180
+    service: http://localhost:5181
   - hostname: storage.mana.how
     service: http://localhost:5000
   - hostname: presi.mana.how
@@ -150,8 +152,14 @@ ingress:
     service: http://localhost:3063
   - hostname: events.mana.how
     service: http://localhost:3065
-  - hostname: cardecky-api.mana.how
+  # Föderations-Backbone (Phase F deployed 2026-05-08)
+  - hostname: share.mana.how
     service: http://localhost:3072
+  - hostname: mcp.mana.how
+    service: http://localhost:3069
+
+  - hostname: cardecky-api.mana.how
+    service: http://localhost:3191
   - hostname: feedback.mana.how
     service: http://localhost:3064
 
@@ -201,6 +209,14 @@ ingress:
   - hostname: zitare-api.mana.how
     service: http://localhost:3083
 
+  # Nutriphi (Code/nutriphi, separate repo)
+  # ~/projects/nutriphi/ on the Mac Mini.
+  # Ports per mana/docs/PORTS.md: 3086 api / 3087 web.
+  - hostname: nutriphi.mana.how
+    service: http://localhost:3087
+  - hostname: nutriphi-api.mana.how
+    service: http://localhost:3086
+
   # ============================================
   # Standalone web apps (separate containers)
   # ============================================