refactor(repo): consolidate openflare-server to root and move subprojects to internal/apps

- Merge all files inside openflare-server to the repository root directory.
- Relocate agent, relay, and flared subprojects from internal/ to internal/apps/.
- Combine docker-compose files and update build context paths to root.
- Update GitHub workflows and Dockerfiles to refer to new directories and package names.
- Rewrite Go package imports across all files.
- Resolve database renew test race condition and clean up docs.

internal/router/v1/openflare/register_tls.go

@@ -0,0 +1,53 @@
+// Copyright 2026 Arctel.net
+// SPDX-License-Identifier: Apache-2.0
+
+package openflare
+
+import (
+	"github.com/Rain-kl/Wavelet/internal/apps/openflare/apiutil"
+	"github.com/Rain-kl/Wavelet/internal/apps/openflare/tls"
+	"github.com/gin-gonic/gin"
+)
+
+func registerTLSRoutes(apiGroup *gin.RouterGroup) {
+	managedDomainRoute := apiGroup.Group("/managed-domains")
+	managedDomainRoute.Use(apiutil.AdminMiddlewares()...)
+	{
+		apiutil.RegisterCollection(managedDomainRoute, "GET", tls.GetManagedDomains)
+		managedDomainRoute.GET("/match", tls.MatchManagedDomainCertificateHandler)
+		apiutil.RegisterCollection(managedDomainRoute, "POST", tls.CreateManagedDomainHandler)
+		managedDomainRoute.POST("/:id/update", tls.UpdateManagedDomainHandler)
+		managedDomainRoute.POST("/:id/delete", tls.DeleteManagedDomainHandler)
+	}
+
+	tlsCertificateRoute := apiGroup.Group("/tls-certificates")
+	tlsCertificateRoute.Use(apiutil.AdminMiddlewares()...)
+	{
+		apiutil.RegisterCollection(tlsCertificateRoute, "GET", tls.GetCertificates)
+		tlsCertificateRoute.GET("/:id", tls.GetCertificateDetail)
+		tlsCertificateRoute.GET("/:id/content", tls.GetCertificateContentHandler)
+		apiutil.RegisterCollection(tlsCertificateRoute, "POST", tls.CreateCertificateHandler)
+		tlsCertificateRoute.POST("/:id/update", tls.UpdateCertificateHandler)
+		tlsCertificateRoute.POST("/:id/update-acme", tls.UpdateACMECertificateHandler)
+		tlsCertificateRoute.POST("/:id/convert-acme", tls.ConvertCertificateToACMEHandler)
+		tlsCertificateRoute.POST("/import-file", tls.ImportCertificateFile)
+		tlsCertificateRoute.POST("/:id/delete", tls.DeleteCertificateHandler)
+		tlsCertificateRoute.POST("/apply", tls.ApplyCertificateHandler)
+		tlsCertificateRoute.POST("/:id/renew", tls.RenewCertificateHandler)
+	}
+
+	acmeAccountRoute := apiGroup.Group("/acme-accounts")
+	acmeAccountRoute.Use(apiutil.AdminMiddlewares()...)
+	{
+		acmeAccountRoute.GET("/default", tls.GetDefaultAcmeAccountHandler)
+	}
+
+	dnsAccountRoute := apiGroup.Group("/dns-accounts")
+	dnsAccountRoute.Use(apiutil.AdminMiddlewares()...)
+	{
+		apiutil.RegisterCollection(dnsAccountRoute, "GET", tls.GetDNSAccounts)
+		apiutil.RegisterCollection(dnsAccountRoute, "POST", tls.CreateDNSAccountHandler)
+		dnsAccountRoute.POST("/:id/update", tls.UpdateDNSAccountHandler)
+		dnsAccountRoute.POST("/:id/delete", tls.DeleteDNSAccountHandler)
+	}
+}