Initial public push: docs cosmos v4 + AI module + framework groundwork

This is the snapshot the production landing site (nibiru-framework.com) is
deployed from. Brings together the recent splash + docs migration to the v4
"Cosmos" design system, the new in-framework AI module, and the framework
groundwork that backs the framework-reference extraction.

What lands:
- docs/: Astro + Starlight site with the v4 dark cosmic palette, GalaxyHero
  canvas constellation, Mission Control chat (wired to /api/oracle →
  api.neuronetz.ai via providers.mjs Ollama), 5-panel MMVC stage
  (Model · AI · Module · Controller · View), translated EN/DE/JA/ES/FR
  content, PWA + sitemap + llms.txt + Umami analytics.
- docs/design-system/: canonical mockup bundle (source/index-v2.html for
  splash, source/docs-system.html + preview/ for docs, SPEC.md, tokens).
- docs/scripts/extraction/framework-reference-v2.md: deep framework
  reference (~1.6k lines, file:line citations, every public factory and
  idiom — basis for the LoRA training corpus.
- application/module/ai/: AI module with chat / embed / RAG / agent
  plugins, plus pdoQuery / httpGet / fileRead tools and Modelfile +
  smoke-test in training/.
- application/module/users/: user / ACL / form-factory traits used as the
  reference plugin pattern for the framework docs.
- application/settings/config/database/: schema + seed migrations
  including the AI module tables (200–203).
- Form factory + autogenerator changes the framework-reference-v2 covers.

Production secrets stay out: docs/.env, settings.production.ini and
ai.production.ini are all gitignored (.example files are in tree).

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

application/settings/config/settings.production.ini.example

@@ -0,0 +1,68 @@
+; =====================================================================
+;  Main application settings — production environment.
+;
+;  Copy to settings.production.ini on the production host and fill in
+;  real values. settings.production.ini SHOULD be gitignored — add it
+;  to .gitignore before deploying.
+;
+;  Mirror the structure of settings.development.ini and override only
+;  the values that differ in production.
+; =====================================================================
+
+[ENGINE]
+cache                 =   "/../../application/view/cache/"
+templates             =   "/../../application/view/templates/"
+templates_c           =   "/../../application/view/templates_c/"
+config_dir            =   "/../../application/view/configs/"
+debug_template        =   "/../../application/view/templates/shared/debug.tpl"
+error_template        =   "/../../application/view/templates/shared/error.tpl"
+error_controller      =   "error"
+debugbar              =   false              ; OFF in production
+caching               =   true
+
+[AUTOLOADER]
+iface.pos[]           = "users"
+iface.pos[]           = "ai"
+trait.pos[]           = "users"
+trait.pos[]           = "ai"
+class.pos[]           = "users"
+class.pos[]           = "ai"
+class.plugin.pos[]    = ""
+
+[SETTINGS]
+pageurl                =   "https://your-app.example.com"
+navigation             =   "/../../application/settings/config/navigation.json"
+modulespath            =   "/../../application/module/"
+entriesperpage         =   25
+timezone               =   "Europe/Vienna"
+smarty.css[]           =   "/public/css/app.min.css"
+smarty.js[]            =   "/public/js/app.min.js"
+
+[DATABASE]
+driver                 =   "pdo"
+hostname               =   "your-prod-db-host"
+port                   =   3306
+username               =   "REPLACE_ME"
+password               =   "REPLACE_ME"
+basename               =   "your_prod_db_name"
+encoding               =   "utf8mb4"
+is.active              =   true
+
+[GENERATOR]
+; In production: don't regenerate models on every request. Generate once
+; locally, commit the resulting application/model/*.php files, ship.
+database               =   false
+database.overwrite     =   false
+
+[SECURITY]
+password_hash          =   "REPLACE_WITH_A_LONG_RANDOM_SALT"
+
+[EMAIL]
+register.smtp           = 1
+register.smtp[host]     = "smtp.your-host.example"
+register.smtp[port]     = "587"
+register.smtp[username] = "REPLACE_ME"
+register.smtp[password] = "REPLACE_ME"
+register.from           = "no-reply@your-app.example.com"
+register.sender         = "Your App"
+register.subject        = "Welcome"