Add email verification, personal calendar feed, and full SEO implementation

- Customer accounts now require email verification (hashed, single-use,
  time-limited tokens) before they can request/confirm bookings, with
  resend flows on login/account/booking widget and rate limiting.
- Admins get a private, rotatable iCalendar (ICS) subscription feed of
  their confirmed bookings and public events, timezone-correct for
  Europe/Berlin including DST, never exposing meeting passwords.
- Adds a full SEO layer: per-page canonical/OG/Twitter metadata with
  CMS-editable overrides and content-derived fallbacks, a dynamic
  sitemap.xml and robots.txt driven by real published content, JSON-LD
  (Organization/LocalBusiness, WebSite, WebPage, BreadcrumbList, Service,
  Event, BlogPosting) that never fabricates data, and a CMS-managed
  redirect table for changed slugs.
- Global ANOUMA-naming audit: the brand name is never used to label
  personal account/calendar areas anywhere in the app, CMS, or emails.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

lib/email/authTemplates.ts

@@ -0,0 +1,14 @@
+import { paragraph, renderButton, renderEmailShell } from "./layout";
+
+export function verificationEmail(args: { name: string; verifyUrl: string; expiresHours: number }): { subject: string; html: string } {
+  const html = renderEmailShell({
+    bodyHtml: [
+      paragraph(`Hallo ${args.name},`),
+      paragraph("dein Konto wurde erstellt.", { italic: true }),
+      paragraph("Bitte bestätige deine E-Mail-Adresse, um dein Konto zu aktivieren."),
+      renderButton("E-Mail-Adresse bestätigen", args.verifyUrl),
+      paragraph(`Dieser Link ist ${args.expiresHours} Stunden gültig. Falls du kein Konto erstellt hast, kannst du diese E-Mail ignorieren.`, { small: true }),
+    ].join("\n"),
+  });
+  return { subject: "Bitte bestätige deine E-Mail-Adresse", html };
+}