Add email verification, personal calendar feed, and full SEO implementation

- Customer accounts now require email verification (hashed, single-use,
  time-limited tokens) before they can request/confirm bookings, with
  resend flows on login/account/booking widget and rate limiting.
- Admins get a private, rotatable iCalendar (ICS) subscription feed of
  their confirmed bookings and public events, timezone-correct for
  Europe/Berlin including DST, never exposing meeting passwords.
- Adds a full SEO layer: per-page canonical/OG/Twitter metadata with
  CMS-editable overrides and content-derived fallbacks, a dynamic
  sitemap.xml and robots.txt driven by real published content, JSON-LD
  (Organization/LocalBusiness, WebSite, WebPage, BreadcrumbList, Service,
  Event, BlogPosting) that never fabricates data, and a CMS-managed
  redirect table for changed slugs.
- Global ANOUMA-naming audit: the brand name is never used to label
  personal account/calendar areas anywhere in the app, CMS, or emails.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

app/(frontend)/page.tsx

@@ -10,20 +10,39 @@ import { CTA } from "@/components/CTA";
 import { Reveal } from "@/components/Reveal";
 import { EventTeaserCard } from "@/components/EventTeaserCard";
 import { getOffers, getPosts, getUpcomingEvents } from "@/lib/payload/content";
-import { getHomeGlobal } from "@/lib/payload/globals";
+import { getHomeGlobal, getSEOSettingsGlobal } from "@/lib/payload/globals";
 import { groupOffersByCategory, moodForOffer } from "@/lib/angebote";
 import { mediaAlt, mediaUrl } from "@/lib/payload/media";
+import { siteConfig } from "@/lib/site";
+import { resolveSeo } from "@/lib/seo/resolve";
+import { buildMetadata } from "@/lib/seo/metadata";
+import { getSiteUrl } from "@/lib/seo/config";
+import { JsonLd, webPageJsonLd } from "@/lib/seo/jsonld";
 
 export const dynamic = "force-dynamic";
 
 export async function generateMetadata(): Promise<Metadata> {
-  const home = await getHomeGlobal();
-  return {
-    title: { absolute: home.heroTitle || "Willkommen bei Anouma" },
-    description:
+  const [home, seoSettings] = await Promise.all([getHomeGlobal(), getSEOSettingsGlobal()]);
+  const resolved = resolveSeo({
+    seo: home.seo,
+    fallbackTitle: `${siteConfig.name} – Begleitung für dich und deine Familie`,
+    fallbackDescription: () =>
       home.heroSupporting ||
+      seoSettings.defaultDescription ||
       "Prozessbegleitung, Doula-Begleitung, Kindergruppen und Singkreise — Räume für Verbindung mit dir selbst, miteinander und mit der Natur.",
-  };
+    fallbackImage: home.heroImage,
+    defaultOgImage: seoSettings.defaultOgImage,
+  });
+  const meta = await buildMetadata({
+    title: resolved.title,
+    description: resolved.description,
+    path: "",
+    ogImageUrl: resolved.ogImageUrl,
+    keywords: resolved.keywords,
+  });
+  // Homepage bypasses the "%s — Anouma" title template — the brand is
+  // already part of the fallback/CMS title itself, avoiding "Anouma — Anouma".
+  return { ...meta, title: { absolute: resolved.title } };
 }
 
 export default async function Home() {
@@ -34,9 +53,17 @@ export default async function Home() {
     getUpcomingEvents(3),
   ]);
   const groups = groupOffersByCategory(offers);
+  const siteUrl = await getSiteUrl();
 
   return (
     <>
+      <JsonLd
+        data={webPageJsonLd({
+          name: home.heroTitle || "Willkommen bei Anouma",
+          description: home.heroSupporting || siteConfig.description,
+          url: siteUrl,
+        })}
+      />
       <Hero
         eyebrow={home.heroEyebrow ?? undefined}
         title={home.heroTitle || "Willkommen bei Anouma"}