feat: Complete NestJS backend scaffold — 22 modules, 39 entities, WebSocket gateway

Full backend rewrite from Rust/Axum to NestJS/TypeScript.
- 22 feature modules (auth, servers, wipes, maps, plugins, players, console,
  chat, team, notifications, settings, schedules, analytics, alerts, status,
  store, webstore, admin, setup, migration, users, licenses)
- 39 TypeORM entities matching PostgreSQL schema (12 migrations)
- Common infrastructure: JWT/RBAC guards, decorators, exception filter
- NATS service with pub/sub/request-reply
- Socket.IO WebSocket gateway with NATS bridge
- Docker: NestJS Dockerfile + updated docker-compose.yml
- Zero compile errors (npx tsc --noEmit clean)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

backend-nest/src/app.module.ts

@@ -0,0 +1,122 @@
+import { Module } from '@nestjs/common';
+import { ConfigModule, ConfigService } from '@nestjs/config';
+import { TypeOrmModule } from '@nestjs/typeorm';
+import { JwtModule } from '@nestjs/jwt';
+import { APP_GUARD } from '@nestjs/core';
+import { ScheduleModule } from '@nestjs/schedule';
+import configuration from './config/configuration';
+
+// Guards
+import { JwtAuthGuard } from './common/guards/jwt-auth.guard';
+import { PermissionsGuard } from './common/guards/permissions.guard';
+import { LicenseGuard } from './common/guards/license.guard';
+
+// Feature Modules
+import { AuthModule } from './modules/auth/auth.module';
+import { UsersModule } from './modules/users/users.module';
+import { LicensesModule } from './modules/licenses/licenses.module';
+import { ServersModule } from './modules/servers/servers.module';
+import { ConsoleModule } from './modules/console/console.module';
+import { PlayersModule } from './modules/players/players.module';
+import { WipesModule } from './modules/wipes/wipes.module';
+import { MapsModule } from './modules/maps/maps.module';
+import { PluginsModule } from './modules/plugins/plugins.module';
+import { ChatModule } from './modules/chat/chat.module';
+import { TeamModule } from './modules/team/team.module';
+import { NotificationsModule } from './modules/notifications/notifications.module';
+import { SettingsModule } from './modules/settings/settings.module';
+import { SchedulesModule } from './modules/schedules/schedules.module';
+import { AnalyticsModule } from './modules/analytics/analytics.module';
+import { AlertsModule } from './modules/alerts/alerts.module';
+import { StatusModule } from './modules/status/status.module';
+import { StoreModule } from './modules/store/store.module';
+import { WebstoreModule } from './modules/webstore/webstore.module';
+import { AdminModule } from './modules/admin/admin.module';
+import { SetupModule } from './modules/setup/setup.module';
+import { MigrationModule } from './modules/migration/migration.module';
+
+// Shared Services
+import { NatsService } from './services/nats.service';
+import { NatsBridgeService } from './services/nats-bridge.service';
+import { SteamService } from './services/steam.service';
+
+// Gateway
+import { NatsBridgeGateway } from './gateways/nats-bridge.gateway';
+
+@Module({
+  imports: [
+    // Configuration
+    ConfigModule.forRoot({
+      isGlobal: true,
+      load: [configuration],
+    }),
+
+    // Database
+    TypeOrmModule.forRootAsync({
+      inject: [ConfigService],
+      useFactory: (config: ConfigService) => ({
+        type: 'postgres' as const,
+        url: config.get<string>('database.url'),
+        autoLoadEntities: true,
+        synchronize: false, // NEVER auto-sync — use migrations only
+        extra: {
+          max: config.get<number>('database.maxConnections') || 20,
+        },
+      }),
+    }),
+
+    // JWT (global)
+    JwtModule.registerAsync({
+      global: true,
+      inject: [ConfigService],
+      useFactory: (config: ConfigService) => ({
+        secret: config.get<string>('jwt.secret'),
+        signOptions: {
+          expiresIn: `${config.get<number>('jwt.accessExpirySeconds') || 900}s`,
+        },
+      }),
+    }),
+
+    // Scheduler
+    ScheduleModule.forRoot(),
+
+    // Feature Modules
+    AuthModule,
+    UsersModule,
+    LicensesModule,
+    ServersModule,
+    ConsoleModule,
+    PlayersModule,
+    WipesModule,
+    MapsModule,
+    PluginsModule,
+    ChatModule,
+    TeamModule,
+    NotificationsModule,
+    SettingsModule,
+    SchedulesModule,
+    AnalyticsModule,
+    AlertsModule,
+    StatusModule,
+    StoreModule,
+    WebstoreModule,
+    AdminModule,
+    SetupModule,
+    MigrationModule,
+  ],
+  providers: [
+    // Global guards (order matters: auth first, then license, then permissions)
+    { provide: APP_GUARD, useClass: JwtAuthGuard },
+    { provide: APP_GUARD, useClass: PermissionsGuard },
+
+    // Shared services
+    NatsService,
+    NatsBridgeService,
+    SteamService,
+
+    // WebSocket gateway
+    NatsBridgeGateway,
+  ],
+  exports: [NatsService, NatsBridgeService, SteamService],
+})
+export class AppModule {}