v0.5.0: Add RBAC auth, LLM router, audit logging, output sanitization

- New: auth.py – Role-based access (operator/approver/viewer)
- New: llm_router.py – Configurable primary/fallback provider chain
- New: audit_log.py + audit_query.py – DSGVO-compliant audit trail
- New: sanitize_output() – masks secrets in bot responses
- Updated: bot.py – Integrated auth guards, router, audit logging
- Updated: ollama_client.py – Router-compatible interface
- Updated: CLOWNFISCHSERVER.md – Documentation updated
- Updated: README.md – Documentation updated

config/knockd.conf

@@ -0,0 +1,18 @@
+[options]
+    UseSyslog
+    # Uncomment to specify interface:
+    # Interface = eth0
+
+# Knock sequence: 7000 → 8000 → 9000 to OPEN SSH
+[openSSH]
+    sequence    = 7000,8000,9000
+    seq_timeout = 10
+    command     = /sbin/iptables -I INPUT -s %IP% -p tcp --dport 22 -j ACCEPT
+    tcpflags    = syn
+
+# Knock sequence: 9000 → 8000 → 7000 to CLOSE SSH again
+[closeSSH]
+    sequence    = 9000,8000,7000
+    seq_timeout = 10
+    command     = /sbin/iptables -D INPUT -s %IP% -p tcp --dport 22 -j ACCEPT
+    tcpflags    = syn