feat!: universal redesign — drop Minecraft stack, single-crate architecture

- remove Java plugins (velocity/paper), dashboard, all MC-specific code
  (handshake, death_code, varint, hostname-HMAC); available in history pre-v0.2
- merge crates/* into one package with src/bin/{rampart,rampart-manager,rampart-cli}
- ProtocolHandler trait + registry (no implementations yet), universal PoW kept
- XDP: universal L3/L4 filter (xdp/core/) + pluggable hook API (xdp/hooks/),
  fix IPv6 saddr bug; clang build verified
- docs: bilingual knowledge base (docs/kb/: attacks x4, defense-levels,
  practice x3), rewrite README/architecture for universal concept
- TODO.md v4.0: <=300-line module limit, competitor benchmark section (ref/)
- deploy/CI/docs cleanup: no MC references, new binary names

cargo build/clippy(-D warnings)/test green (55 tests)

docker-compose.yml

@@ -1,5 +1,3 @@
-version: "3.9"
-
 services:
   redis:
     image: redis:7-alpine
@@ -16,21 +14,6 @@ services:
       retries: 5
     restart: unless-stopped
 
-  nats:
-    image: nats:2-alpine
-    container_name: rampart-nats
-    ports:
-      - "4222:4222"
-    command: -js -c /etc/nats/nats.conf
-    volumes:
-      - nats-data:/data
-    healthcheck:
-      test: ["CMD", "nats", "server", "check"]
-      interval: 10s
-      timeout: 5s
-      retries: 3
-    restart: unless-stopped
-
   clickhouse:
     image: clickhouse/clickhouse-server:24-alpine
     container_name: rampart-clickhouse
@@ -39,7 +22,7 @@ services:
       - "9000:9000"   # Native TCP
     volumes:
       - clickhouse-data:/var/lib/clickhouse
-      - ./clickhouse-init:/docker-entrypoint-initdb.d
+      - ./deploy/clickhouse/schema.sql:/docker-entrypoint-initdb.d/schema.sql:ro
     healthcheck:
       test: ["CMD", "curl", "-f", "http://localhost:8123/ping"]
       interval: 10s
@@ -47,19 +30,6 @@ services:
       retries: 5
     restart: unless-stopped
 
-  prometheus:
-    image: prom/prometheus:latest
-    container_name: rampart-prometheus
-    ports:
-      - "9090:9090"
-    volumes:
-      - ./prometheus.yml:/etc/prometheus/prometheus.yml
-      - prometheus-data:/prometheus
-    command:
-      - '--config.file=/etc/prometheus/prometheus.yml'
-      - '--storage.tsdb.path=/prometheus'
-    restart: unless-stopped
-
   grafana:
     image: grafana/grafana:latest
     container_name: rampart-grafana
@@ -67,14 +37,16 @@ services:
       - "3000:3000"
     environment:
       - GF_SECURITY_ADMIN_PASSWORD=${GRAFANA_PASSWORD:-admin}
+      - GF_INSTALL_PLUGINS=grafana-clickhouse-datasource
     volumes:
       - grafana-data:/var/lib/grafana
-      - ./dashboards:/etc/grafana/provisioning/dashboards
+      - ./deploy/grafana/datasources:/etc/grafana/provisioning/datasources:ro
+      - ./deploy/grafana/dashboards:/etc/grafana/provisioning/dashboards:ro
+    depends_on:
+      - clickhouse
     restart: unless-stopped
 
 volumes:
   redis-data:
-  nats-data:
   clickhouse-data:
-  prometheus-data:
   grafana-data: