Migrate omsorgapp to browser SPA, add Docker/CI build setup

- omsorgapp: drop Electron, run as a plain Vite/React browser app; refresh
  token moves to an HttpOnly cookie (omsorgCore), CORS added for the new
  browser origin, document download/preview switched to Blob-based browser
  APIs.
- Add Dockerfiles for omsorgCore, omsorgapp, and omsorgWeb, a docker-compose.yml
  wiring Postgres/MySQL/all three apps together, and a Gitea Actions workflow
  that builds and pushes images to the repo's container registry on push to
  main and on version tags.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

omsorgapp/src/api/facilityQualificationRatesApi.js

@@ -0,0 +1,25 @@
+import { FacilityQualificationRatesApi } from "omsorgcore-client-ts";
+import { configFor, callApi } from "./apiClientHelpers.js";
+
+// Kapselt /api/facilities/{facilityId}/qualification-rates von omsorgCore
+// (FacilityQualificationRatesController) über den generierten Client (omsorgcore-client-ts).
+// Qualifikationsabhängige Preise sind eine 1:n-Unterressource von Facility (FR-EIN-4).
+export async function listFacilityQualificationRates(accessToken, facilityId) {
+  const api = new FacilityQualificationRatesApi(configFor(accessToken));
+  return callApi(api.apiFacilitiesFacilityIdQualificationRatesGetRaw({ facilityId }));
+}
+
+export async function createFacilityQualificationRate(accessToken, facilityId, payload) {
+  const api = new FacilityQualificationRatesApi(configFor(accessToken));
+  return callApi(api.apiFacilitiesFacilityIdQualificationRatesPostRaw({ facilityId, createFacilityQualificationRateRequest: payload }));
+}
+
+export async function updateFacilityQualificationRate(accessToken, facilityId, id, payload) {
+  const api = new FacilityQualificationRatesApi(configFor(accessToken));
+  return callApi(api.apiFacilitiesFacilityIdQualificationRatesIdPutRaw({ facilityId, id, updateFacilityQualificationRateRequest: payload }));
+}
+
+export async function deleteFacilityQualificationRate(accessToken, facilityId, id) {
+  const api = new FacilityQualificationRatesApi(configFor(accessToken));
+  return callApi(api.apiFacilitiesFacilityIdQualificationRatesIdDeleteRaw({ facilityId, id }));
+}