refactor: Restructure project for Docker compliance and documentation

- Move documentation to docs/ directory for better organization
- Add bin/ directory for utility scripts
- Add lib/ for shared library functions
- Update all build scripts to ensure strict Docker compliance
- Enhance AGENTS.md with Docker container requirements
- Create comprehensive compliance and security documentation
- Reorganize test suite with improved structure
- Remove obsolete Dockerfile and archive documentation
- Add final security compliance report

BREAKING CHANGE: Restructured project layout with moved documentation directories

💘 Generated with Crush

Assisted-by: GLM-4.6 via Crush <crush@charm.land>

config/hooks/installed/install-scripts.sh

@@ -9,7 +9,7 @@ install -m 755 /workspace/src/firewall-setup.sh /usr/local/bin/
 install -m 755 /workspace/src/security-hardening.sh /usr/local/bin/
 
 # Create VPN configuration apply script
-cat > /usr/local/bin/apply-vpn-config.sh << 'EOF'
+cat >/usr/local/bin/apply-vpn-config.sh <<'EOF'
 #!/bin/bash
 # Apply VPN configuration and update firewall
 set -euo pipefail
@@ -35,7 +35,7 @@ chmod +x /usr/local/bin/apply-vpn-config.sh
 mkdir -p /usr/share/applications
 
 # WireGuard Configuration Editor shortcut
-cat > /usr/share/applications/wg-config.desktop << EOF
+cat >/usr/share/applications/wg-config.desktop <<EOF
 [Desktop Entry]
 Name=WireGuard Configuration
 Comment=Edit WireGuard configuration
@@ -47,7 +47,7 @@ Categories=Network;System;
 EOF
 
 # VPN Configuration Apply shortcut
-cat > /usr/share/applications/apply-vpn.desktop << EOF
+cat >/usr/share/applications/apply-vpn.desktop <<EOF
 [Desktop Entry]
 Name=Apply VPN Configuration
 Comment=Apply WireGuard configuration and start VPN
@@ -58,4 +58,22 @@ Type=Application
 Categories=Network;System;
 EOF
 
-echo "Source scripts installed successfully."
+# WireGuard QR Code Import shortcut
+cat >/usr/share/applications/scan-wireguard-qr.desktop <<EOF
+[Desktop Entry]
+Name=Import WireGuard QR Code
+Comment=Scan QR code to import WireGuard configuration
+Exec=pkexec /usr/local/bin/scan-wireguard-qr.sh
+Icon=camera-web
+Terminal=true
+Type=Application
+Categories=Network;System;
+EOF
+
+# Create WireGuard configuration directory
+mkdir -p /etc/wireguard
+
+# Add kneluser to appropriate groups
+usermod -a -G sudo,audio,video,plugdev,input,cdrom,floppy kneluser 2>/dev/null || true
+
+echo "Source scripts installed successfully."