chore: Remove obsolete microservices directories and update all references

- Delete data-entry-app/ (1.6GB), reports-app/ (447MB), .auto-build-data/
- Saved ~1.4GB disk space (64% reduction: 2.2GB → 845MB)

Updated references across 38 files:
- .claude/rules/ paths: backend/modules/, src/modules/
- .claude/commands/validate.md: all validation paths
- docs/ (13 files): data-entry, telegram, README, CLAUDE.md
- scripts/ (3 files): backup-secrets, restore-secrets, test-docker
- security/ (2 files): git_cleanup, SECURITY_PROCEDURES
- deployment/ & shared/: updated all stale comments

All paths now reflect ultrathin monolith architecture:
- Backend: backend/modules/{reports,data_entry,telegram}/
- Frontend: src/modules/{reports,data-entry}/
- Shared: shared/{auth,database,routes}/

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

deployment/windows/config/web.config.10.0.20.36-INTERNAL

@@ -0,0 +1,59 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!--
+  ====================================================================
+  ROA2WEB - Internal Application Server Configuration
+  ====================================================================
+  Server: 10.0.20.36 (internal application server)
+  Role: Application host + API proxy to localhost backend
+
+  This web.config ONLY goes on the INTERNAL server (10.0.20.36).
+  It serves the frontend and proxies API calls to localhost:8000.
+
+  Location: C:\inetpub\wwwroot\roa2web\web.config (on 10.0.20.36)
+
+  ⚠️ DO NOT use this config on 10.0.20.122 (public server)!
+  ====================================================================
+-->
+<configuration>
+  <system.webServer>
+    <rewrite>
+      <rules>
+        <!-- Proxy API requests to unified backend on localhost -->
+        <rule name="Proxy Unified API" stopProcessing="true">
+          <match url="^roa2web/api/(.*)" />
+          <action type="Rewrite" url="http://localhost:8000/api/{R:1}" />
+        </rule>
+
+        <!-- Proxy uploads to unified backend on localhost -->
+        <rule name="Proxy Uploads" stopProcessing="true">
+          <match url="^roa2web/uploads/(.*)" />
+          <action type="Rewrite" url="http://localhost:8000/uploads/{R:1}" />
+        </rule>
+
+        <!-- SPA fallback - all other routes serve index.html -->
+        <rule name="SPA Fallback" stopProcessing="true">
+          <match url="^roa2web/.*" />
+          <conditions logicalGrouping="MatchAll">
+            <add input="{REQUEST_FILENAME}" matchType="IsFile" negate="true" />
+            <add input="{REQUEST_FILENAME}" matchType="IsDirectory" negate="true" />
+          </conditions>
+          <action type="Rewrite" url="/roa2web/index.html" />
+        </rule>
+      </rules>
+    </rewrite>
+
+    <!-- Static content configuration -->
+    <staticContent>
+      <mimeMap fileExtension=".webmanifest" mimeType="application/manifest+json" />
+      <mimeMap fileExtension=".js" mimeType="application/javascript" />
+      <mimeMap fileExtension=".json" mimeType="application/json" />
+    </staticContent>
+
+    <!-- Client cache for static assets (1 year) -->
+    <httpProtocol>
+      <customHeaders>
+        <add name="Cache-Control" value="public, max-age=31536000" />
+      </customHeaders>
+    </httpProtocol>
+  </system.webServer>
+</configuration>