feat(community): Phase 3.C — Identität (Avatar + Klarname-Toggle + Karma + Eulen-Profil)

Macht aus den Pseudonymen echte Charaktere ohne Klarnamen-Zwang.

Pixel-Identicon-Avatar (3.C.2):
- generateAvatarSvg(displayHash) — pure-function, deterministisch.
  5×5 left-mirrored Identicon mit HSL-Foreground/Background aus dem
  Hash. Inline-SVG, kein Storage, kein img-load-Flicker.
- <EulenAvatar> Component im Package, in ItemCard neben dem Pseudonym.

Klarname-Toggle (3.C.1):
- auth.users + community_show_real_name boolean (default off, opt-in).
- PATCH /api/v1/me/profile akzeptiert communityShowRealName.
- mana-analytics LEFT JOINs auth.users → bei opt-in liefert auth-
  required /public + /me/reacted Endpoints zusätzlich realName.
- Anonymous /api/v1/public/feedback/* zeigt realName NIE — auch nicht
  wenn opted-in. Public-Mirror bleibt für SEO + Privacy safe.
- Migration 008_community_identity.sql lokal + prod eingespielt.

Karma-System (3.C.3):
- auth.users + community_karma int. toggleReaction increment/decrement
  am Author-User (Self-Reactions zählen nicht — kein Self-Farming).
- KARMA_THRESHOLDS + tierFromKarma() im Package: Bronze (0-9) /
  Silver (10-49) / Gold (50-199) / Platin (200+).
- ItemCard zeigt Tier-Dot neben dem Pseudonym, Title-Tooltip mit
  Karma-Zahl. Floor-clamped at 0.

Eulen-Profil (3.C.4):
- GET /api/v1/public/feedback/eule/{hash} — alle public-Posts dieser
  Eule + aggregiertes Karma. SHA256-Format-Validation.
- /community/eule/[hash] Public-SSR-Route mit Avatar-Hero, Tier-Badge,
  Karma-Counter, Post-Liste. Author-Klick im ItemCard navigiert hin.
- publicFeedbackService.getEulenProfile() im Package.

PublicFeedbackItem erweitert um displayHash (public Pseudonym-ID,
SHA256 ist one-way → safe to expose) + karma + optional realName.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

services/mana-auth/src/db/schema/auth.ts

@@ -53,6 +53,14 @@ export const users = authSchema.table('users', {
 	// → Look → Templates). The flow is skippable, but even a skip sets
 	// this timestamp so we don't re-prompt. See docs/plans/onboarding-flow.md.
 	onboardingCompletedAt: timestamp('onboarding_completed_at', { withTimezone: true }),
+	// Community-Hub identity opt-ins (Phase 3.C of feedback-rewards-and-identity).
+	// Off by default — users stay anonymous as their tier-pseudonym ("Wachsame
+	// Eule #4528"). Opt-in shows the real `name` next to the pseudonym in the
+	// auth-required community feed only; the public-mirror NEVER exposes it.
+	communityShowRealName: boolean('community_show_real_name').default(false).notNull(),
+	// Karma += 1 per reaction received from another user, decremented on unreact.
+	// Drives the public Bronze/Silver/Gold/Platinum-Eulen tier badge.
+	communityKarma: integer('community_karma').default(0).notNull(),
 });
 
 // Sessions table (Better Auth schema)