feat(infra): Co-Domain herbatrium.com + api.herbatrium.com

cloudflared-config: 2 hostnames hinzu (apex → 3104, api → 3103).
docker-compose mana-auth: CORS_ORIGINS erweitert um die zwei neuen
Origins. herbatrium.mana.how bleibt funktional (kein Primary-Switch).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

cloudflared-config.yml

@@ -408,10 +408,16 @@ ingress:
   # Herbatrium — Citizen-Science-Pflanzenbeobachtungen (Code/herbatrium/).
   # Host-Ports 3103+3104 (statt 3101+3102) wegen memoro-audio-Konflikt
   # auf 3101. Service-interne Ports bleiben 3101+3000 per PORTS.md.
+  # 2026-05-20 Co-Domain herbatrium.com + api.herbatrium.com hinzugefügt
+  # (kein Primary-Switch, herbatrium.mana.how bleibt funktional).
   - hostname: herbatrium.mana.how
     service: http://localhost:3104
   - hostname: herbatrium-api.mana.how
     service: http://localhost:3103
+  - hostname: herbatrium.com
+    service: http://localhost:3104
+  - hostname: api.herbatrium.com
+    service: http://localhost:3103
 
   # mana-sync-v2 — Event-Sourcing-Platform (mana/services/mana-sync/).
   # Container `mana-sync-v2` (Host-Port 3055 → Service 3050). SOT für

docker-compose.macmini.yml

@@ -248,7 +248,7 @@ services:
       # Enforced by services/mana-auth/src/auth/sso-config.spec.ts.
       # All productivity modules now live under mana.how (path-based) —
       # no per-module subdomain entries required here.
-      CORS_ORIGINS: https://mana.how,https://auth.mana.how,https://whopxl.mana.how,https://cardecky.mana.how,https://cardecky-api.mana.how,https://wordeck.com,https://api.wordeck.com,https://memoro-app.mana.how,https://zitare.com,https://app.zitare.com,https://api.zitare.com,https://zitare-api.mana.how,https://nutriphi.mana.how,https://nutriphi-api.mana.how,https://manawald.mana.how,https://werdrobe.com,https://api.werdrobe.com,https://pageta.mana.how,https://pageta-api.mana.how,https://pageta.com,https://api.pageta.com,https://herbatrium.mana.how,https://herbatrium-api.mana.how,https://moodlit.mana.how,https://moodlit-api.mana.how,https://comicello.com,https://api.comicello.com,https://comicello.mana.how,https://comicello-api.mana.how,https://uload-api.mana.how,https://ulo.ad,https://mukke.mana.how,https://mukke-api.mana.how,https://manaclick.mana.how
+      CORS_ORIGINS: https://mana.how,https://auth.mana.how,https://whopxl.mana.how,https://cardecky.mana.how,https://cardecky-api.mana.how,https://wordeck.com,https://api.wordeck.com,https://memoro-app.mana.how,https://zitare.com,https://app.zitare.com,https://api.zitare.com,https://zitare-api.mana.how,https://nutriphi.mana.how,https://nutriphi-api.mana.how,https://manawald.mana.how,https://werdrobe.com,https://api.werdrobe.com,https://pageta.mana.how,https://pageta-api.mana.how,https://pageta.com,https://api.pageta.com,https://herbatrium.mana.how,https://herbatrium-api.mana.how,https://herbatrium.com,https://api.herbatrium.com,https://moodlit.mana.how,https://moodlit-api.mana.how,https://comicello.com,https://api.comicello.com,https://comicello.mana.how,https://comicello-api.mana.how,https://uload-api.mana.how,https://ulo.ad,https://mukke.mana.how,https://mukke-api.mana.how,https://manaclick.mana.how
     ports:
       - "3001:3001"
     healthcheck: