Add email verification, personal calendar feed, and full SEO implementation

- Customer accounts now require email verification (hashed, single-use,
  time-limited tokens) before they can request/confirm bookings, with
  resend flows on login/account/booking widget and rate limiting.
- Admins get a private, rotatable iCalendar (ICS) subscription feed of
  their confirmed bookings and public events, timezone-correct for
  Europe/Berlin including DST, never exposing meeting passwords.
- Adds a full SEO layer: per-page canonical/OG/Twitter metadata with
  CMS-editable overrides and content-derived fallbacks, a dynamic
  sitemap.xml and robots.txt driven by real published content, JSON-LD
  (Organization/LocalBusiness, WebSite, WebPage, BreadcrumbList, Service,
  Event, BlogPosting) that never fabricates data, and a CMS-managed
  redirect table for changed slugs.
- Global ANOUMA-naming audit: the brand name is never used to label
  personal account/calendar areas anywhere in the app, CMS, or emails.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

components/booking/BookingWidget.tsx

@@ -2,6 +2,7 @@
 
 import { useEffect, useState } from "react";
 import { MonthCalendar, type CalendarMarker } from "./MonthCalendar";
+import { ResendVerificationButton } from "@/components/auth/ResendVerificationButton";
 
 type SlotsResponse = { durationMinutes: number; slots: Record<string, { start: string; end: string }[]> };
 
@@ -16,7 +17,15 @@ function fmtDate(iso: string) {
   return new Date(iso).toLocaleDateString("de-DE", { weekday: "long", day: "2-digit", month: "long" });
 }
 
-export function BookingWidget({ offerSlug, isLoggedIn }: { offerSlug: string; isLoggedIn: boolean }) {
+export function BookingWidget({
+  offerSlug,
+  isLoggedIn,
+  isVerified,
+}: {
+  offerSlug: string;
+  isLoggedIn: boolean;
+  isVerified: boolean;
+}) {
   const [slotsByDay, setSlotsByDay] = useState<SlotsResponse["slots"]>({});
   const [loading, setLoading] = useState(true);
   const [selectedDay, setSelectedDay] = useState<Date | null>(null);
@@ -76,6 +85,16 @@ export function BookingWidget({ offerSlug, isLoggedIn }: { offerSlug: string; is
     );
   }
 
+  if (!isVerified) {
+    return (
+      <div className="rounded-3xl bg-anouma-cream-light p-8 text-center">
+        <p className="text-base text-anouma-plum">Bitte bestätige zuerst deine E-Mail-Adresse.</p>
+        <p className="mt-2 text-sm text-anouma-plum/70">Erst danach kannst du einen Termin anfragen.</p>
+        <ResendVerificationButton variant="session" className="mt-5 flex justify-center" />
+      </div>
+    );
+  }
+
   const markers: CalendarMarker[] = Object.keys(slotsByDay).map((key) => ({ date: new Date(key), status: "public" }));
   const daySlots = selectedDay ? (slotsByDay[dateKey(selectedDay)] ?? []) : [];