feat: rebrand Hemmelig to paste.es for cloudhost.es

- Set Spanish as default language with ephemeral/encrypted privacy focus
- Translate all user-facing strings and legal pages to Spanish
- Replace Norwegian flag with Spanish flag in footer
- Remove Hemmelig/terces.cloud links, add cloudhost.es sponsorship
- Rewrite PrivacyPage: zero data collection, ephemeral design emphasis
- Rewrite TermsPage: Spanish law, RGPD, paste.es/CloudHost.es references
- Update PWA manifest, HTML meta tags, package.json branding
- Rename webhook headers to X-Paste-Event / X-Paste-Signature
- Update API docs title and contact to paste.es / cloudhost.es

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

prisma/migrations/20250707062129_add_instance_settings/migration.sql

@@ -0,0 +1,28 @@
+-- CreateTable
+CREATE TABLE "instance_settings" (
+    "id" TEXT NOT NULL PRIMARY KEY,
+    "instanceName" TEXT DEFAULT 'Hemmelig Instance',
+    "instanceDescription" TEXT DEFAULT 'Secure secret sharing platform',
+    "allowRegistration" BOOLEAN DEFAULT true,
+    "requireEmailVerification" BOOLEAN DEFAULT false,
+    "maxSecretsPerUser" INTEGER DEFAULT 100,
+    "defaultSecretExpiration" INTEGER DEFAULT 72,
+    "maxSecretSize" INTEGER DEFAULT 1024,
+    "enforceHttps" BOOLEAN DEFAULT true,
+    "allowPasswordProtection" BOOLEAN DEFAULT true,
+    "allowIpRestriction" BOOLEAN DEFAULT true,
+    "maxPasswordAttempts" INTEGER DEFAULT 3,
+    "sessionTimeout" INTEGER DEFAULT 24,
+    "enableRateLimiting" BOOLEAN DEFAULT true,
+    "rateLimitRequests" INTEGER DEFAULT 100,
+    "rateLimitWindow" INTEGER DEFAULT 60,
+    "smtpHost" TEXT,
+    "smtpPort" INTEGER,
+    "smtpUsername" TEXT,
+    "smtpPassword" TEXT,
+    "smtpSecure" BOOLEAN DEFAULT true,
+    "fromEmail" TEXT,
+    "fromName" TEXT,
+    "createdAt" DATETIME NOT NULL DEFAULT CURRENT_TIMESTAMP,
+    "updatedAt" DATETIME NOT NULL
+);