Club come entità principale, branding e fix infrastruttura streaming.

Introduce clubs con abbonamento, branding Active Storage e flusso registrazione società; corregge healthcheck MediaMTX (immagine distroless) e allinea dominio produzione matchlivetv.it.

Co-authored-by: Cursor <cursoragent@cursor.com>

infra/docker-compose.prod.yml

@@ -39,11 +39,13 @@ services:
       - ./slates:/slates:ro
       - recordings:/recordings
     command: /mediamtx.yml
+    # Immagine distroless: niente shell/wget/curl; API :9997 non esposta sull'host
     healthcheck:
-      test: ["CMD", "wget", "-q", "--spider", "http://127.0.0.1:9997/v3/config/global/get"]
+      test: ["CMD", "/mediamtx", "--help"]
       interval: 15s
       timeout: 5s
       retries: 3
+      start_period: 10s
 
   rails:
     build:
@@ -70,6 +72,17 @@ services:
       YOUTUBE_REDIRECT_URI: ${YOUTUBE_REDIRECT_URI:-}
       HLS_PUBLIC_URL: ${HLS_PUBLIC_URL:-http://localhost:8888}
       APP_PUBLIC_URL: ${APP_PUBLIC_URL:-http://localhost:3000}
+      PRIVACY_CONTACT_EMAIL: ${PRIVACY_CONTACT_EMAIL:-privacy@matchlive.it}
+      PRIVACY_CONTROLLER_NAME: ${PRIVACY_CONTROLLER_NAME:-Emiliano Frascaro}
+      PRIVACY_CONTROLLER_ADDRESS: ${PRIVACY_CONTROLLER_ADDRESS:-Via Guido De Ruggiero, 89 - 20142 - Milano (MI)}
+      PRIVACY_CONTROLLER_VAT: ${PRIVACY_CONTROLLER_VAT:-}
+      MAILER_FROM: ${MAILER_FROM:-Match Live TV <noreply@matchlive.it>}
+      SMTP_ADDRESS: ${SMTP_ADDRESS:-}
+      SMTP_PORT: ${SMTP_PORT:-587}
+      SMTP_USERNAME: ${SMTP_USERNAME:-}
+      SMTP_PASSWORD: ${SMTP_PASSWORD:-}
+      SMTP_AUTH: ${SMTP_AUTH:-plain}
+      SMTP_STARTTLS: ${SMTP_STARTTLS:-true}
       RAILS_LOG_TO_STDOUT: "true"
       RAILS_LOG_LEVEL: ${RAILS_LOG_LEVEL:-info}
     ports: