feat: initial scaffold — MVP catalogue de données d'API

- Backend NestJS : CRUD api_entries + categories, upload YAML multi-fichiers,
  génération docs AsyncAPI (@asyncapi/cli@6.0.0) et OpenAPI (redocly)
- Fix: route wildcard GET /api/apis/:id/*path pour servir les assets statiques
  (CSS/JS) générés par AsyncAPI HTML template (contournement bug path-to-regexp v8)
- Frontend Angular 19 : pages catalog, browse, api-detail, doc-viewer, upload (DSFR)
- Seeder de données de démo (idempotent)
- Docker Compose dev + Dockerfiles + manifests K8s
- Documentation : README, architecture, référence API REST

Generated with [Claude Code](https://claude.ai/code)
via [Happy](https://happy.engineering)

Co-Authored-By: Claude <noreply@anthropic.com>
Co-Authored-By: Happy <yesreply@happy.engineering>

infra/k8s/backend.yaml

@@ -0,0 +1,83 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: backend
+  namespace: datacat
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: backend
+  template:
+    metadata:
+      labels:
+        app: backend
+    spec:
+      containers:
+        - name: backend
+          image: git.chmod777.dev/z3n/datacat/back:latest
+          ports:
+            - containerPort: 3000
+          env:
+            - name: NODE_ENV
+              value: production
+            - name: PORT
+              value: "3000"
+            - name: DATABASE_HOST
+              value: postgres
+            - name: DATABASE_PORT
+              value: "5432"
+            - name: DATABASE_NAME
+              value: datacat
+            - name: DATABASE_USER
+              valueFrom:
+                secretKeyRef:
+                  name: datacat-secrets
+                  key: db-user
+            - name: DATABASE_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: datacat-secrets
+                  key: db-password
+            - name: DOCS_OUTPUT_DIR
+              value: /app/docs-output
+          volumeMounts:
+            - name: docs-output
+              mountPath: /app/docs-output
+          resources:
+            requests:
+              memory: "256Mi"
+              cpu: "100m"
+            limits:
+              memory: "512Mi"
+              cpu: "500m"
+          livenessProbe:
+            httpGet:
+              path: /health
+              port: 3000
+            initialDelaySeconds: 15
+            periodSeconds: 20
+          readinessProbe:
+            httpGet:
+              path: /health
+              port: 3000
+            initialDelaySeconds: 5
+            periodSeconds: 10
+      volumes:
+        - name: docs-output
+          persistentVolumeClaim:
+            claimName: datacat-docs-pvc
+      imagePullSecrets:
+        - name: registry-secret
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: backend
+  namespace: datacat
+spec:
+  selector:
+    app: backend
+  ports:
+    - port: 80
+      targetPort: 3000

infra/k8s/frontend.yaml

@@ -0,0 +1,47 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: frontend
+  namespace: datacat
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: frontend
+  template:
+    metadata:
+      labels:
+        app: frontend
+    spec:
+      containers:
+        - name: frontend
+          image: git.chmod777.dev/z3n/datacat/front:latest
+          ports:
+            - containerPort: 80
+          resources:
+            requests:
+              memory: "64Mi"
+              cpu: "50m"
+            limits:
+              memory: "128Mi"
+              cpu: "200m"
+          livenessProbe:
+            httpGet:
+              path: /
+              port: 80
+            initialDelaySeconds: 5
+            periodSeconds: 20
+      imagePullSecrets:
+        - name: registry-secret
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: frontend
+  namespace: datacat
+spec:
+  selector:
+    app: frontend
+  ports:
+    - port: 80
+      targetPort: 80

infra/k8s/ingressroutes.yaml

@@ -0,0 +1,79 @@
+# IngressRoutes pour datacat dans le namespace dev
+# Frontend: https://datacat.dev.chmod777.dev
+# API:      https://api.datacat.dev.chmod777.dev
+
+# --- Frontend HTTP → HTTPS redirect ---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: frontend-http
+  namespace: datacat
+spec:
+  entryPoints: [web]
+  routes:
+    - match: Host(`datacat.dev.chmod777.dev`)
+      kind: Rule
+      middlewares:
+        - name: redirect-https
+          namespace: dev
+      services:
+        - name: frontend
+          port: 80
+---
+# --- Frontend HTTPS avec Basic Auth ---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: frontend-https
+  namespace: datacat
+spec:
+  entryPoints: [websecure]
+  routes:
+    - match: Host(`datacat.dev.chmod777.dev`)
+      kind: Rule
+      middlewares:
+        - name: dev-basic-auth
+          namespace: dev
+      services:
+        - name: frontend
+          port: 80
+  tls:
+    certResolver: letsencrypt
+---
+# --- API HTTP → HTTPS redirect ---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: backend-http
+  namespace: datacat
+spec:
+  entryPoints: [web]
+  routes:
+    - match: Host(`api.datacat.dev.chmod777.dev`)
+      kind: Rule
+      middlewares:
+        - name: redirect-https
+          namespace: dev
+      services:
+        - name: backend
+          port: 80
+---
+# --- API HTTPS avec Basic Auth ---
+apiVersion: traefik.io/v1alpha1
+kind: IngressRoute
+metadata:
+  name: backend-https
+  namespace: datacat
+spec:
+  entryPoints: [websecure]
+  routes:
+    - match: Host(`api.datacat.dev.chmod777.dev`)
+      kind: Rule
+      middlewares:
+        - name: dev-basic-auth
+          namespace: dev
+      services:
+        - name: backend
+          port: 80
+  tls:
+    certResolver: letsencrypt

infra/k8s/kustomization.yaml

@@ -0,0 +1,10 @@
+apiVersion: kustomize.config.k8s.io/v1beta1
+kind: Kustomization
+
+resources:
+  - namespace.yaml
+  - pvc.yaml
+  - postgres.yaml
+  - backend.yaml
+  - frontend.yaml
+  - ingressroutes.yaml

infra/k8s/namespace.yaml

@@ -0,0 +1,4 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: datacat

infra/k8s/postgres.yaml

@@ -0,0 +1,59 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: postgres
+  namespace: datacat
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: postgres
+  template:
+    metadata:
+      labels:
+        app: postgres
+    spec:
+      containers:
+        - name: postgres
+          image: postgres:17-alpine
+          ports:
+            - containerPort: 5432
+          env:
+            - name: POSTGRES_USER
+              valueFrom:
+                secretKeyRef:
+                  name: datacat-secrets
+                  key: db-user
+            - name: POSTGRES_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: datacat-secrets
+                  key: db-password
+            - name: POSTGRES_DB
+              value: datacat
+          volumeMounts:
+            - name: postgres-data
+              mountPath: /var/lib/postgresql/data
+          resources:
+            requests:
+              memory: "256Mi"
+              cpu: "100m"
+            limits:
+              memory: "512Mi"
+              cpu: "500m"
+      volumes:
+        - name: postgres-data
+          persistentVolumeClaim:
+            claimName: datacat-postgres-pvc
+---
+apiVersion: v1
+kind: Service
+metadata:
+  name: postgres
+  namespace: datacat
+spec:
+  selector:
+    app: postgres
+  ports:
+    - port: 5432
+      targetPort: 5432

infra/k8s/pvc.yaml

@@ -0,0 +1,23 @@
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: datacat-docs-pvc
+  namespace: datacat
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 5Gi
+---
+apiVersion: v1
+kind: PersistentVolumeClaim
+metadata:
+  name: datacat-postgres-pvc
+  namespace: datacat
+spec:
+  accessModes:
+    - ReadWriteOnce
+  resources:
+    requests:
+      storage: 10Gi