Scaffold Homelab Manager foundation

Monorepo (Express+TS+Drizzle/libSQL server, React+Vite+Tabler web) matching
the stack used by ScheduleTaskManager and Sloth Manager. Includes Authentik
OIDC login with local admin/operator/viewer roles (first user becomes admin),
a generalized audit log, encrypted-at-rest storage for future integration API
tokens, the DB schema for all planned modules, and the Tabler-styled app
shell/nav. Also ports the Secrets (expiry tracker) and IP Addresses (IPAM)
modules from Sloth Manager onto the new stack.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

server/src/services/secretStatus.ts

@@ -0,0 +1,19 @@
+export type SecretStatus = "ok" | "expiring" | "expired";
+
+/** Computes status + days-left for a secret, matching Sloth Manager's original semantics. */
+export function computeSecretStatus(
+  expiryDate: string,
+  warnDays: number,
+  now: Date = new Date(),
+): { status: SecretStatus; daysLeft: number } {
+  const expiry = new Date(`${expiryDate}T00:00:00Z`);
+  const today = new Date(Date.UTC(now.getUTCFullYear(), now.getUTCMonth(), now.getUTCDate()));
+  const daysLeft = Math.round((expiry.getTime() - today.getTime()) / (1000 * 60 * 60 * 24));
+
+  let status: SecretStatus;
+  if (daysLeft < 0) status = "expired";
+  else if (daysLeft <= warnDays) status = "expiring";
+  else status = "ok";
+
+  return { status, daysLeft };
+}