Migrate omsorgapp to browser SPA, add Docker/CI build setup

- omsorgapp: drop Electron, run as a plain Vite/React browser app; refresh
  token moves to an HttpOnly cookie (omsorgCore), CORS added for the new
  browser origin, document download/preview switched to Blob-based browser
  APIs.
- Add Dockerfiles for omsorgCore, omsorgapp, and omsorgWeb, a docker-compose.yml
  wiring Postgres/MySQL/all three apps together, and a Gitea Actions workflow
  that builds and pushes images to the repo's container registry on push to
  main and on version tags.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

omsorgWeb/mitarbeiter-app/api-client-php/lib/Model/PermissionAction.php

@@ -0,0 +1,77 @@
+<?php
+/**
+ * PermissionAction
+ *
+ * PHP version 8.1
+ *
+ * @category Class
+ * @package  OmsorgCoreClient
+ * @author   OpenAPI Generator team
+ * @link     https://openapi-generator.tech
+ */
+
+/**
+ * OmsorgCore.Api
+ *
+ * No description provided (generated by Openapi Generator https://github.com/openapitools/openapi-generator)
+ *
+ * The version of the OpenAPI document: 1.0
+ * Generated by: https://openapi-generator.tech
+ * Generator version: 7.14.0
+ */
+
+/**
+ * NOTE: This class is auto generated by OpenAPI Generator (https://openapi-generator.tech).
+ * https://openapi-generator.tech
+ * Do not edit the class manually.
+ */
+
+namespace OmsorgCoreClient\Model;
+use \OmsorgCoreClient\ObjectSerializer;
+
+/**
+ * PermissionAction Class Doc Comment
+ *
+ * @category Class
+ * @package  OmsorgCoreClient
+ * @author   OpenAPI Generator team
+ * @link     https://openapi-generator.tech
+ */
+class PermissionAction
+{
+    /**
+     * Possible values of this enum
+     */
+    public const VIEW = 'View';
+
+    public const CREATE = 'Create';
+
+    public const EDIT = 'Edit';
+
+    public const DELETE = 'Delete';
+
+    public const EXPORT = 'Export';
+
+    public const APPROVE = 'Approve';
+
+    public const RECOVER = 'Recover';
+
+    /**
+     * Gets allowable values of the enum
+     * @return string[]
+     */
+    public static function getAllowableEnumValues()
+    {
+        return [
+            self::VIEW,
+            self::CREATE,
+            self::EDIT,
+            self::DELETE,
+            self::EXPORT,
+            self::APPROVE,
+            self::RECOVER
+        ];
+    }
+}
+
+