refactor: clean repository structure for v0.1.0 open source release

- Remove Go artifacts (cmd/, internal/, pkg/, go.mod)
- Move furt-lua/* content to repository root
- Restructure as clean src/, config/, scripts/, tests/ layout
- Rewrite README.md as practical tool documentation
- Remove timeline references and marketing language
- Clean .gitignore from Go-era artifacts
- Update config/server.lua with example.org defaults
- Add .env.production to .gitignore for security

Repository now ready for open source distribution with minimal,
focused structure and generic configuration templates.
close issue DAW/furt#86

scripts/test_modular.sh

@@ -0,0 +1,61 @@
+#!/bin/bash
+# furt-lua/scripts/test_modular.sh
+# Test der modularen Furt-Architektur
+
+BASE_URL="http://127.0.0.1:8080"
+HUGO_API_KEY="hugo-dev-key-change-in-production"
+
+echo "🧩 Testing Modular Furt Architecture"
+echo "===================================="
+
+# Test 1: Module dependencies check
+echo -e "\n1️⃣ Testing module imports (should not error on startup):"
+echo "Starting server in background..."
+cd "$(dirname "$0")/.."
+lua src/main.lua &
+SERVER_PID=$!
+sleep 2
+
+if kill -0 $SERVER_PID 2>/dev/null; then
+    echo "✅ Server started successfully - all modules loaded"
+else
+    echo "❌ Server failed to start - module import error"
+    exit 1
+fi
+
+# Test 2: Public endpoints (no auth)
+echo -e "\n2️⃣ Testing public endpoints:"
+curl -s -w "Status: %{http_code}\n" "$BASE_URL/health" | jq '.features'
+
+# Test 3: Protected endpoints without auth (should fail)
+echo -e "\n3️⃣ Testing auth protection:"
+curl -s -w "Status: %{http_code}\n" \
+  -X POST \
+  -H "Content-Type: application/json" \
+  -d '{"name":"Test","email":"test@example.com","message":"Test"}' \
+  "$BASE_URL/v1/mail/send" | jq '.error'
+
+# Test 4: Protected endpoints with auth (should work)
+echo -e "\n4️⃣ Testing authenticated request:"
+curl -s -w "Status: %{http_code}\n" \
+  -H "X-API-Key: $HUGO_API_KEY" \
+  "$BASE_URL/v1/auth/status" | jq '.'
+
+# Test 5: Rate limiting headers
+echo -e "\n5️⃣ Testing rate limit headers:"
+curl -s -i -H "X-API-Key: $HUGO_API_KEY" "$BASE_URL/v1/auth/status" | grep -E "X-RateLimit|HTTP"
+
+# Cleanup
+echo -e "\n🧹 Cleanup:"
+kill $SERVER_PID 2>/dev/null
+wait $SERVER_PID 2>/dev/null
+echo "Server stopped"
+
+echo -e "\n✅ Modular Architecture Test Complete!"
+echo "Expected behavior:"
+echo "- Test 1: ✅ Server starts without module errors"
+echo "- Test 2: ✅ Health endpoint works, shows features"
+echo "- Test 3: ❌ 401 Unauthorized (missing API key)"
+echo "- Test 4: ✅ 200 OK with auth details"
+echo "- Test 5: ✅ Rate limit headers present"
+