refactor: clean up codebase — remove legacy references, optimize dockerfile, prune .env.example, simplify CI/CD

- Traefik: remove asephstech/asephscloud SSL certs, fix api.insecure, add ping healthcheck
- .env.example: prune from 145 to 30 vars (remove Firebase, Discord, Coolify, etc.)
- scraper.Dockerfile: remove Node.js & Chromium from runtime, add healthcheck
- CI/CD: remove orphan container ref, commented blocks, fix lint workflow
- infra: remove mysql config (no active service), clean up middleware config
- root: remove .nvmrc (dup), renovate.json (use dependabot), simplify Makefile
- scripts: fix legacy package refs, simplify update-deps to use bun
- docs: remove stale handoff-log, quality-gates, superpowers designs, archived files
- compose: add healthchecks to traefik, redis, and scraper-api services

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

infra/traefik/dynamic/middlewares.yaml

@@ -65,8 +65,6 @@ http:
     common-chain:
       chain:
         middlewares:
-          # - real-ip
-          # - block-sensitive-paths
           - secure-headers
           - compress
           - retry

infra/traefik/dynamic/ssl.yaml

@@ -1,8 +1,5 @@
 tls:
   certificates:
-    # Legacy production layout: asephstech.pem is paired with asephscloud.key.
-    - certFile: /etc/traefik/certs/asephstech.pem
-      keyFile: /etc/traefik/certs/asephscloud.key
     - certFile: /etc/traefik/certs/asepharyana.my.id.pem
       keyFile: /etc/traefik/certs/asepharyana.my.id.key
     - certFile: /etc/traefik/certs/asepharyana.web.id.pem
@@ -10,5 +7,5 @@ tls:
   stores:
     default:
       defaultCertificate:
-        certFile: /etc/traefik/certs/asephstech.pem
-        keyFile: /etc/traefik/certs/asephscloud.key
+        certFile: /etc/traefik/certs/asepharyana.my.id.pem
+        keyFile: /etc/traefik/certs/asepharyana.my.id.key