feat: add PHP ini management system and update infrastructure configs

- Add PHP ini management classes (Access, IniDirective, IniKey, PhpIni)
- Update deployment configurations (Wireguard, Traefik, Monitoring)
- Add DNS stack and Ansible role
- Add deployment debugging playbooks
- Update framework components (FilePath, RedisConnectionPool)
- Update .gitignore and documentation

deployment/stacks/traefik/README.md

@@ -11,7 +11,10 @@ Traefik acts as the central reverse proxy for all services, handling:
 
 ## Services
 
-- **traefik.michaelschiemer.de** - Traefik Dashboard (BasicAuth protected)
+- **traefik.michaelschiemer.de** - Traefik Dashboard (VPN-only + BasicAuth protected)
+  - ?? **Nur ?ber WireGuard VPN erreichbar** (10.8.0.0/24)
+  - Zus?tzlich durch BasicAuth gesch?tzt
+  - ?ffentlicher Zugriff ist blockiert
 
 ## Prerequisites
 
@@ -126,6 +129,16 @@ labels:
   - "traefik.http.routers.myapp.middlewares=gzip-compression@file"
 ```
 
+### VPN-Only Access (WireGuard Network)
+```yaml
+labels:
+  # Restrict access to WireGuard VPN network only (10.8.0.0/24)
+  - "traefik.http.routers.myapp.middlewares=vpn-only@file"
+
+  # Combined: VPN-only + BasicAuth (order matters - VPN check first, then BasicAuth)
+  - "traefik.http.routers.myapp.middlewares=vpn-only@file,traefik-auth"
+```
+
 ### Middleware Chains
 ```yaml
 labels: