feat: challenge registry-driven platform + XVI/XVII imports + admin toggle + domain rename

- Rename repo/domain: attack-defense-platform / attackdefense.imrnes.team (all refs replaced)
- challenge_registry.json: single source of truth (28 challs across gemastik18/xvi/xvii)
- teams.py: registry-driven CHALLENGES, set_challenge_enabled, sync_challenge_runtime
  (apply enable/disable to live teams: build/up or stop/remove + receiver restart)
- compose_gen.py: render per-team compose from canonical per-challenge templates
  (image reuse, per-team ports 30xxx, flag mounts, passwords)
- gen_canonical_composes.py: canonical docker-compose.yml for all services
- import_new_challenges.py: import XVI/XVII services + EOL base image fixes
  (debian:buster→bookworm, node:14→20, python:3.7-slim→3.11)
- receiver: xvi package (10 checkers) + xvii package (12 generic checkers),
  Challenge base reads PASSWORD_<team_port> from env; gen_receiver_main.py
  generates per-team main.py from registry
- main.py: /api/challenges returns full registry; PATCH /api/challenges/<name>
  toggles enabled + applies to live teams
- index.html: 🏗️ Challenge Manager tab (toggle per challenge, grouped by set)
- SLA bonus now dynamic (all enabled challenges, not hardcoded 6)

services/kode-viewer/src/auth/auth.service.ts

@@ -0,0 +1,51 @@
+import { Injectable } from '@nestjs/common';
+import * as bcrypt from 'bcrypt';
+import { v4 as uuidv4 } from 'uuid';
+
+import { KVService } from 'src/kv/kv.service';
+import { AuthDTO } from './auth.dto';
+import { User } from './auth.model';
+
+@Injectable()
+export class AuthService {
+  constructor(private kv: KVService) {}
+
+  async login(payload: AuthDTO) {
+    const user: User = await this.kv.get(payload.email);
+    if (!user) {
+      return { message: 'User not found', sessionId: null };
+    }
+
+    if (!(await bcrypt.compare(payload.password, user.hashedPassword))) {
+      return { message: 'Invalid password', sessionId: null };
+    }
+
+    delete user.hashedPassword;
+
+    const sessionId = uuidv4();
+    await this.kv.set(sessionId, user, 1800);
+
+    return { message: 'Login successful', sessionId };
+  }
+
+  async register(payload: AuthDTO) {
+    const userExists = await this.kv.get(payload.email);
+    if (userExists) {
+      return { message: 'User already exists' };
+    }
+
+    const hashedPassword = await bcrypt.hash(payload.password, 10);
+    const data = { email: payload.email, hashedPassword, isAdmin: false };
+    await this.kv.set(payload.email, data, 0);
+    return { message: 'User registered' };
+  }
+
+  async logout(sessionId: string) {
+    await this.kv.del(sessionId);
+    return { message: 'Logged out' };
+  }
+
+  async getUser(sessionId: string) {
+    return this.kv.get(sessionId);
+  }
+}