chore: initial skeleton

- docs/architecture.md: native rewrite plan (5 services + control plane,
  Active-Active cluster like nmg, Floating-IP for HTTP ingress)
- cmd/edgeguard-{api,scheduler,ctl}: minimal Gin + CLI stubs
- packaging/debian/edgeguard-{api,ui,meta}: control + maintainer scripts
- deploy/systemd/edgeguard-api.service + edgeguard-scheduler.service
  with hardening defaults
- Makefile: build / cross-compile (amd64+arm64) / deb / publish targets
- scripts/install.sh + scripts/apt-repo/build-package.sh stubs

packaging/debian/edgeguard-api/DEBIAN/control

@@ -0,0 +1,18 @@
+Package: edgeguard-api
+Version: __VERSION__
+Architecture: __ARCH__
+Maintainer: NetCell IT <support@netcell-it.de>
+Homepage: https://edgeguard.netcell-it.de
+Description: EdgeGuard — native Reverse-Proxy / LB / Forward-Proxy / VPN / Firewall
+ EdgeGuard is a native Debian/Ubuntu edge gateway combining HAProxy,
+ Angie (nginx-fork), Squid, WireGuard and nftables, configured from
+ a PostgreSQL single-source-of-truth via a Go management API.
+ Deployable as a cluster of symmetric peers (KeyDB Active-Active +
+ PG Streaming Replication + provider Floating-IP for HTTP ingress).
+ .
+ This package ships the management API, scheduler and CLI.
+Depends: postgresql-16 | postgresql-17, edgeguard-keydb (>= 6.3.4-edgeguard1), angie, haproxy (>= 2.8), squid, wireguard-tools, nftables, certbot, sudo, adduser, systemd, ca-certificates
+Recommends: apparmor, fail2ban
+Section: admin
+Priority: optional
+Installed-Size: 0