Add email verification, personal calendar feed, and full SEO implementation

- Customer accounts now require email verification (hashed, single-use,
  time-limited tokens) before they can request/confirm bookings, with
  resend flows on login/account/booking widget and rate limiting.
- Admins get a private, rotatable iCalendar (ICS) subscription feed of
  their confirmed bookings and public events, timezone-correct for
  Europe/Berlin including DST, never exposing meeting passwords.
- Adds a full SEO layer: per-page canonical/OG/Twitter metadata with
  CMS-editable overrides and content-derived fallbacks, a dynamic
  sitemap.xml and robots.txt driven by real published content, JSON-LD
  (Organization/LocalBusiness, WebSite, WebPage, BreadcrumbList, Service,
  Event, BlogPosting) that never fabricates data, and a CMS-managed
  redirect table for changed slugs.
- Global ANOUMA-naming audit: the brand name is never used to label
  personal account/calendar areas anywhere in the app, CMS, or emails.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

app/(frontend)/angebote/[slug]/page.tsx

@@ -1,5 +1,5 @@
 import type { Metadata } from "next";
-import { notFound } from "next/navigation";
+import { notFound, permanentRedirect, redirect } from "next/navigation";
 import { PageHeader } from "@/components/PageHeader";
 import { Section } from "@/components/Section";
 import { ImagePlaceholder } from "@/components/ImagePlaceholder";
@@ -11,31 +11,77 @@ import { moodForOffer } from "@/lib/angebote";
 import { mediaAlt, mediaUrl } from "@/lib/payload/media";
 import { OFFER_CATEGORIES } from "@/collections/Offers";
 import { getCurrentCustomer } from "@/lib/auth/customer";
+import { getSEOSettingsGlobal } from "@/lib/payload/globals";
+import { resolveSeo } from "@/lib/seo/resolve";
+import { buildMetadata } from "@/lib/seo/metadata";
+import { getSiteUrl } from "@/lib/seo/config";
+import { excerptFromRichText } from "@/lib/seo/textExcerpt";
+import { JsonLd, serviceJsonLd } from "@/lib/seo/jsonld";
+import { resolveRedirect } from "@/lib/seo/redirects";
+import { siteConfig } from "@/lib/site";
 
 export const dynamic = "force-dynamic";
 
 type Args = { params: Promise<{ slug: string }> };
 
+async function resolveOfferOrRedirect(slug: string) {
+  const offer = await getOfferBySlug(slug);
+  if (offer) return offer;
+
+  const match = await resolveRedirect(`/angebote/${slug}`);
+  if (match) {
+    if (match.permanent) permanentRedirect(match.to);
+    redirect(match.to);
+  }
+  return null;
+}
+
 export async function generateMetadata({ params }: Args): Promise<Metadata> {
   const { slug } = await params;
-  const offer = await getOfferBySlug(slug);
+  const [offer, seoSettings] = await Promise.all([getOfferBySlug(slug), getSEOSettingsGlobal()]);
   if (!offer) return {};
-  return {
-    title: offer.title,
-    description: offer.shortDescription,
-  };
+
+  const resolved = resolveSeo({
+    seo: offer.seo,
+    fallbackTitle: `${offer.title} – ${siteConfig.name}`,
+    fallbackDescription: () => offer.shortDescription,
+    fallbackImage: offer.image,
+    defaultOgImage: seoSettings.defaultOgImage,
+  });
+  return buildMetadata({
+    title: resolved.title,
+    description: resolved.description,
+    path: `/angebote/${offer.slug}`,
+    ogImageUrl: resolved.ogImageUrl,
+    keywords: resolved.keywords,
+    // Private single-session offers (e.g. "Einzelbegleitung") stay reachable
+    // via their direct link but must never be indexed or listed.
+    noindex: offer.visibility === "private",
+  });
 }
 
 export default async function OfferDetailPage({ params }: Args) {
   const { slug } = await params;
-  const offer = await getOfferBySlug(slug);
+  const offer = await resolveOfferOrRedirect(slug);
   if (!offer) notFound();
 
   const categoryLabel = OFFER_CATEGORIES.find((c) => c.value === offer.category)?.label;
   const customer = offer.bookable ? await getCurrentCustomer() : null;
+  const siteUrl = await getSiteUrl();
 
   return (
     <>
+      {offer.visibility !== "private" && (
+        <JsonLd
+          data={serviceJsonLd({
+            offer,
+            description: offer.seo?.description || excerptFromRichText(offer.description) || offer.shortDescription,
+            imageUrl: mediaUrl(offer.image, "hero"),
+            siteUrl,
+            providerName: siteConfig.name,
+          })}
+        />
+      )}
       <PageHeader
         eyebrow={categoryLabel}
         title={offer.title}
@@ -81,7 +127,7 @@ export default async function OfferDetailPage({ params }: Args) {
         <Section tone="cream">
           <div className="mx-auto max-w-3xl">
             <h2 className="mb-6 text-center font-serif text-3xl font-medium text-anouma-plum">Termin auswählen</h2>
-            <BookingWidget offerSlug={offer.slug!} isLoggedIn={Boolean(customer)} />
+            <BookingWidget offerSlug={offer.slug!} isLoggedIn={Boolean(customer)} isVerified={Boolean(customer?.emailVerified)} />
           </div>
         </Section>
       ) : (

app/(frontend)/angebote/page.tsx

@@ -7,25 +7,41 @@ import { Button } from "@/components/Button";
 import { CTA } from "@/components/CTA";
 import { Reveal } from "@/components/Reveal";
 import { getOffers } from "@/lib/payload/content";
-import { getAngeboteIntroGlobal } from "@/lib/payload/globals";
+import { getAngeboteIntroGlobal, getSEOSettingsGlobal } from "@/lib/payload/globals";
 import { groupOffersByCategory, moodForOffer } from "@/lib/angebote";
 import { mediaAlt, mediaUrl } from "@/lib/payload/media";
+import { resolveSeo } from "@/lib/seo/resolve";
+import { buildMetadata } from "@/lib/seo/metadata";
+import { getSiteUrl } from "@/lib/seo/config";
+import { JsonLd, webPageJsonLd } from "@/lib/seo/jsonld";
+import { siteConfig } from "@/lib/site";
 
 export const dynamic = "force-dynamic";
 
+const FALLBACK_DESCRIPTION =
+  "Prozessbegleitung, Doula-Begleitung, Kindergruppen und Singkreise — die Angebote von Anouma im Überblick.";
+
 export async function generateMetadata(): Promise<Metadata> {
-  const intro = await getAngeboteIntroGlobal();
-  return {
-    title: intro.title || "Angebote",
-    description:
-      intro.lead ||
-      "Prozessbegleitung, Doula-Begleitung, Kindergruppen und Singkreise — die Angebote von Anouma im Überblick.",
-  };
+  const [intro, seoSettings] = await Promise.all([getAngeboteIntroGlobal(), getSEOSettingsGlobal()]);
+  const resolved = resolveSeo({
+    seo: intro.seo,
+    fallbackTitle: `Begleitung für dich und deine Familie – ${siteConfig.name}`,
+    fallbackDescription: () => intro.lead || seoSettings.defaultDescription || FALLBACK_DESCRIPTION,
+    defaultOgImage: seoSettings.defaultOgImage,
+  });
+  return buildMetadata({
+    title: resolved.title,
+    description: resolved.description,
+    path: "/angebote",
+    ogImageUrl: resolved.ogImageUrl,
+    keywords: resolved.keywords,
+  });
 }
 
 export default async function AngebotePage() {
   const [intro, offers] = await Promise.all([getAngeboteIntroGlobal(), getOffers()]);
   const groups = groupOffersByCategory(offers);
+  const siteUrl = await getSiteUrl();
 
   const prozessbegleitung = groups.find((g) => g.category === "prozessbegleitung")?.offers[0];
   const doula = groups.find((g) => g.category === "doula-begleitung")?.offers[0];
@@ -34,6 +50,13 @@ export default async function AngebotePage() {
 
   return (
     <>
+      <JsonLd
+        data={webPageJsonLd({
+          name: intro.title || "Angebote",
+          description: intro.lead || FALLBACK_DESCRIPTION,
+          url: `${siteUrl}/angebote`,
+        })}
+      />
       <PageHeader
         title={intro.title || "Angebote"}
         lead={intro.lead}

app/(frontend)/angebote/singkreise/page.tsx

@@ -7,13 +7,18 @@ import { Reveal } from "@/components/Reveal";
 import { getOffers } from "@/lib/payload/content";
 import { moodForOffer } from "@/lib/angebote";
 import { mediaUrl } from "@/lib/payload/media";
+import { buildMetadata } from "@/lib/seo/metadata";
+import { siteConfig } from "@/lib/site";
 
 export const dynamic = "force-dynamic";
 
-export const metadata: Metadata = {
-  title: "Singkreise",
-  description: "Gemeinsam singen. Verbinden. Heilen. Für Herz und Seele.",
-};
+export async function generateMetadata(): Promise<Metadata> {
+  return buildMetadata({
+    title: `Singkreise – ${siteConfig.name}`,
+    description: "Gemeinsam singen. Verbinden. Heilen. Für Herz und Seele.",
+    path: "/angebote/singkreise",
+  });
+}
 
 export default async function SingkreisePage() {
   const offers = await getOffers();