refactor: Restructure project for Docker compliance and documentation

- Move documentation to docs/ directory for better organization
- Add bin/ directory for utility scripts
- Add lib/ for shared library functions
- Update all build scripts to ensure strict Docker compliance
- Enhance AGENTS.md with Docker container requirements
- Create comprehensive compliance and security documentation
- Reorganize test suite with improved structure
- Remove obsolete Dockerfile and archive documentation
- Add final security compliance report

BREAKING CHANGE: Restructured project layout with moved documentation directories

💘 Generated with Crush

Assisted-by: GLM-4.6 via Crush <crush@charm.land>

config/hooks/live/desktop-environment.sh

@@ -1,84 +0,0 @@
-#!/bin/bash
-# Configure IceWM and LightDM for privacy
-set -euo pipefail
-
-echo "Configuring desktop environment..."
-
-# Create IceWM configuration directory
-mkdir -p /etc/icewm
-
-# Create minimal IceWM configuration
-cat >/etc/icewm/preferences <<'EOF'
-# IceWM Configuration for KNEL-Football
-Theme="Default/default.theme"
-TitleBarHeight=20
-TitleBarCentered=1
-ShowTaskBar=1
-TaskBarShowAllWindows=1
-TaskBarShowCPU=0
-TaskBarShowNet=0
-TaskBarShowClock=1
-TaskBarClockLeds=0
-WinMenuItems=256
-InputFocusSloppy=1
-UseMouseWheel=1
-QuickSwitch=1
-QuickSwitchAllWorkspaces=1
-AutoReloadMenus=0
-ShowPopupsWhileGrabbed=0
-EOF
-
-# Create IceWM theme
-cat >/etc/icewm/theme <<'EOF'
-Theme="Flat/default.theme"
-TitleBarBkColor="rgb:40/40/40"
-TitleBarTextColor="rgb:FF/FF/FF"
-MenuBkColor="rgb:30/30/30"
-MenuTextColor="rgb:FF/FF/FF"
-ActiveTaskBarBkColor="rgb:50/50/50"
-NormalTaskBarBkColor="rgb:40/40/40"
-NormalButtonBkColor="rgb:40/40/40"
-ActiveButtonBkColor="rgb:60/60/60"
-NormalForeground="rgb:FF/FF/FF"
-ActiveForeground="rgb:FF/FF/FF"
-EOF
-
-# Configure LightDM for privacy (hide usernames)
-mkdir -p /etc/lightdm/lightdm.conf.d
-
-cat >/etc/lightdm/lightdm.conf.d/99-privacy.conf <<'EOF'
-[Seat:*]
-greeter-hide-users=true
-greeter-show-manual-login=true
-greeter-allow-guest=false
-allow-guest=false
-autologin-user=
-autologin-user-timeout=0
-autologin-session=lightdm-xsession
-EOF
-
-# Create autostart directory for IceWM
-mkdir -p /etc/skel/.config/autostart
-
-# Remmina autostart
-cat >/etc/skel/.config/autostart/remmina.desktop <<'EOF'
-[Desktop Entry]
-Name=Remmina
-Comment=Remote Desktop Client
-Exec=remmina
-Terminal=false
-Type=Application
-Categories=Network;
-EOF
-
-# Create simple IceWM startup script
-mkdir -p /etc/X11/Xsession.d
-cat >/etc/X11/Xsession.d/99icewm <<'EOF'
-# Start IceWM window manager
-exec icewm-session
-EOF
-
-# Set IceWM as default session
-update-alternatives --install /usr/bin/x-window-manager x-window-manager /usr/bin/icewm 50
-
-echo "Desktop environment configured successfully."

config/hooks/live/usb-automount.sh

@@ -1,100 +0,0 @@
-#!/bin/bash
-# Configure USB automount support
-set -euo pipefail
-
-echo "Configuring USB automount support..."
-
-# Create udev rules for USB devices
-mkdir -p /etc/udev/rules.d
-
-cat >/etc/udev/rules.d/99-usb-automount.rules <<'EOF'
-# USB automount rules for KNEL-Football
-ACTION=="add", SUBSYSTEM=="block", ENV{ID_FS_USAGE}=="filesystem", RUN+="/usr/local/bin/usb-automount.sh %k"
-ACTION=="remove", SUBSYSTEM=="block", RUN+="/usr/local/bin/usb-unmount.sh %k"
-EOF
-
-# Create USB automount script
-cat >/usr/local/bin/usb-automount.sh <<'EOF'
-#!/bin/bash
-# USB automount script
-set -euo pipefail
-
-DEVICE="/dev/${1}"
-DEVICE_NAME="${1}"
-MOUNT_BASE="/media/usb-${DEVICE_NAME}"
-
-# Create mount point if it doesn't exist
-mkdir -p "${MOUNT_BASE}"
-
-# Determine filesystem type and mount with appropriate options
-if blkid "${DEVICE}" | grep -q "TYPE=\"vfat\""; then
-    mount -t vfat -o rw,uid=1000,gid=1000,dmask=000,fmask=111 "${DEVICE}" "${MOUNT_BASE}"
-elif blkid "${DEVICE}" | grep -q "TYPE=\"ntfs\""; then
-    mount -t ntfs-3g -o rw,uid=1000,gid=1000,dmask=000,fmask=111 "${DEVICE}" "${MOUNT_BASE}"
-elif blkid "${DEVICE}" | grep -q "TYPE=\"ext4\""; then
-    mount -t ext4 -o rw "${DEVICE}" "${MOUNT_BASE}"
-else
-    mount -t auto -o rw,uid=1000,gid=1000 "${DEVICE}" "${MOUNT_BASE}"
-fi
-
-echo "USB device ${DEVICE} mounted at ${MOUNT_BASE}"
-EOF
-
-# Create USB unmount script
-cat >/usr/local/bin/usb-unmount.sh <<'EOF'
-#!/bin/bash
-# USB unmount script
-set -euo pipefail
-
-DEVICE_NAME="${1}"
-MOUNT_BASE="/media/usb-${DEVICE_NAME}"
-
-# Unmount if mounted
-if mountpoint -q "${MOUNT_BASE}"; then
-    umount "${MOUNT_BASE}"
-    rmdir "${MOUNT_BASE}"
-    echo "USB device ${DEVICE_NAME} unmounted"
-fi
-EOF
-
-# Make scripts executable
-chmod +x /usr/local/bin/usb-automount.sh
-chmod +x /usr/local/bin/usb-unmount.sh
-
-# Add user to plugdev group for USB access
-usermod -a -G plugdev kneluser 2>/dev/null || true
-
-# Create PCManFM configuration for better file management
-mkdir -p /etc/skel/.config/pcmanfm
-cat >/etc/skel/.config/pcmanfm/default/pcmanfm.conf <<'EOF'
-[config]
-bm_open_method=0
-su_cmd=xdg-su -c '%s'
-
-[volume]
-mount_on_startup=0
-mount_removable=1
-autorun=0
-
-[ui]
-always_show_tabs=0
-hide_close_btn=0
-win_width=640
-win_height=480
-
-[desktop]
-show_wallpaper=0
-wallpaper_mode=0
-wallpaper_file=
-wallpaper_common=1
-desktop_bg=#000000
-desktop_fg=#ffffff
-desktop_shadow=#ffffff
-desktop_font="Sans 12"
-show_wm_menu=1
-show_documents=1
-show_trash=1
-show_mounts=1
-EOF
-
-echo "USB automount support configured successfully."