feat(infra): Phase 5 — consolidate to single web container

Remove 20 standalone web containers, simplify tunnel and auth config:

docker-compose.macmini.yml (-579 lines):
- Remove chat-web, todo-web, calendar-web, clock-web, contacts-web,
  zitare-web, storage-web, presi-web, cards-web, nutriphi-web,
  skilltree-web, photos-web, mukke-web, citycorners-web, picture-web,
  inventar-web, calc-web, times-web, uload-web, memoro-web
- Keep: mana-web (unified), element-web, matrix-web, arcade-web, manavoxel-web
- Update mana-web with all backend API URLs, increase mem_limit to 256m

cloudflared-config.yml (-60 lines):
- Remove all *.mana.how web subdomains (now served at mana.how/*)
- Keep backend API subdomains (*-api.mana.how)

mana-auth trustedOrigins (30 → 8 origins):
- Only mana.how + games/matrix subdomains that remain separate

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

services/mana-auth/src/auth/better-auth.config.ts

@@ -252,42 +252,18 @@ export function createBetterAuth(databaseUrl: string) {
 		// When adding a new app, add its production domain here AND to
 		// CORS_ORIGINS in docker-compose.macmini.yml.
 		trustedOrigins: [
-			// Production domains - auth service
-			'https://auth.mana.how',
+			// Unified app — all productivity apps are now under mana.how
 			'https://mana.how',
-			// Production domains - all apps (keep alphabetical)
-			'https://calc.mana.how',
-			'https://calendar.mana.how',
-			'https://chat.mana.how',
-			'https://clock.mana.how',
-			'https://contacts.mana.how',
-			'https://context.mana.how',
-			'https://docs.mana.how',
-			'https://element.mana.how',
-			'https://inventar.mana.how',
-			'https://link.mana.how',
-			'https://cards.mana.how',
-			'https://matrix.mana.how',
-			'https://mchat.mana.how',
-			'https://mukke.mana.how',
-			'https://nutriphi.mana.how',
-			'https://photos.mana.how',
-			'https://picture.mana.how',
-			'https://planta.mana.how',
-			'https://playground.mana.how',
-			'https://presi.mana.how',
-			'https://questions.mana.how',
-			'https://skilltree.mana.how',
-			'https://storage.mana.how',
-			'https://times.mana.how',
-			'https://todo.mana.how',
-			'https://traces.mana.how',
-			'https://zitare.mana.how',
+			'https://auth.mana.how',
+			// Separate apps (not part of unified app)
+			'https://arcade.mana.how', // Games
+			'https://whopxl.mana.how', // Games
+			'https://link.mana.how', // Matrix/Manalink
+			'https://element.mana.how', // Element (Matrix client)
+			'https://matrix.mana.how', // Matrix
 			// Local development
 			'http://localhost:3001',
 			'http://localhost:5173',
-			'http://localhost:5174',
-			'http://localhost:5190',
 		],
 
 		// Plugins