v0.5.0: Add RBAC auth, LLM router, audit logging, output sanitization

- New: auth.py – Role-based access (operator/approver/viewer)
- New: llm_router.py – Configurable primary/fallback provider chain
- New: audit_log.py + audit_query.py – DSGVO-compliant audit trail
- New: sanitize_output() – masks secrets in bot responses
- Updated: bot.py – Integrated auth guards, router, audit logging
- Updated: ollama_client.py – Router-compatible interface
- Updated: CLOWNFISCHSERVER.md – Documentation updated
- Updated: README.md – Documentation updated

systemd/clownfisch-boot.service

@@ -0,0 +1,18 @@
+[Unit]
+Description=🐠 Clownfischserver Boot Notification
+Documentation=https://github.com/mehlzoerwer-claude/clownfischserver
+After=network-online.target clownfisch.service ollama.service
+Wants=network-online.target
+
+[Service]
+Type=oneshot
+ExecStartPre=/bin/sleep 120
+ExecStart=/opt/clownfischserver/venv/bin/python3 /opt/clownfischserver/bot/boot_notify.py
+EnvironmentFile=/opt/clownfischserver/config/.env
+WorkingDirectory=/opt/clownfischserver
+StandardOutput=journal
+StandardError=journal
+SyslogIdentifier=clownfisch-boot
+
+[Install]
+WantedBy=multi-user.target