chore: full project audit cleanup, dead code removal, and documentation update

Dead code removed:
- Module.php: remove assignBackupPlan(), getSelfServiceCurrencies() (no callers)
- Cache.php: remove forgetPattern() (no callers, no-op on filesystem)
- module.js: remove vfLoadSelfServiceReport() (no UI trigger)

Stale files removed:
- .releaserc.json (orphaned, conflicts with tag-based workflow)
- .github/workflows/api-sync-check.yml (baseline never populated)
- docs/openapi-baseline.yaml (placeholder stub)
- scripts/generate-endpoint-doc.sh (broken grep patterns)

Security fixes:
- AdminHTML: cast $serverId to (int), cast $serviceId to (int)
- admin.php: add explicit break after every output() call, sanitize error msgs

File hygiene:
- Move modify.sql into modules/servers/VirtFusionDirect/ (matches README docs)
- Fix CHANGELOG.md: remove duplicate 1.0.0 entry, clean up mixed git host URLs

Documentation:
- CLAUDE.md: full rewrite with current architecture, Cache class, development
  rules (try/catch, ownership validation, HTTP methods, caching policy)
- README.md: remove stale IPv4 removal references, add new features (traffic,
  backups, VNC toggle, password reset, OS gallery, copy buttons), add Cache.php
  to file structure, remove "Primary IPv4 Protection" known issue

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

modules/servers/VirtFusionDirect/lib/AdminHTML.php

@@ -25,6 +25,7 @@ EOT;
 
     public static function serverId($serverId)
     {
+        $serverId = (int) $serverId;
         return <<<EOT
             <input type="text" class="form-control input-200 input-inline" name="modulefields[0]" size="20" value="${serverId}" />
             <span class="text-info">&nbsp;&nbsp;Changing the Sever ID manually is not recommended. Alterations to this field are usually handled automatically.</span>
@@ -34,6 +35,7 @@ EOT;
     public static function serverInfo($systemUrl, $serviceId)
     {
         $systemUrl = htmlspecialchars($systemUrl, ENT_QUOTES, 'UTF-8');
+        $serviceId = (int) $serviceId;
         $cacheV = time();
         return <<<EOT
             <link href="${systemUrl}modules/servers/VirtFusionDirect/templates/css/module.css?v=${cacheV}" rel="stylesheet">

modules/servers/VirtFusionDirect/lib/Cache.php

@@ -170,27 +170,4 @@ class Cache
         }
     }
 
-    /**
-     * Delete all cache keys matching a pattern.
-     *
-     * @param string $pattern Glob pattern (e.g., "os:*")
-     */
-    public static function forgetPattern($pattern)
-    {
-        $redis = self::redis();
-        if ($redis) {
-            try {
-                $keys = $redis->keys(self::PREFIX . $pattern);
-                if (!empty($keys)) {
-                    $redis->del($keys);
-                }
-            } catch (\Exception $e) {
-                // Continue to file cleanup
-            }
-        }
-
-        // File cache: can only clear all files for pattern matches
-        // Since file names are md5 hashed, we can't match patterns.
-        // For non-Redis, TTL expiry handles cleanup naturally.
-    }
 }

modules/servers/VirtFusionDirect/lib/Module.php

@@ -379,31 +379,6 @@ class Module
         return false;
     }
 
-    /**
-     * Assign a backup plan to a server.
-     *
-     * @param int $serviceID
-     * @param int $planId Backup plan ID (0 to remove)
-     * @return object|false
-     */
-    public function assignBackupPlan($serviceID, $planId)
-    {
-        $planId = (int) $planId;
-        $ctx = $this->resolveServiceContext($serviceID);
-        if (!$ctx) return false;
-
-        $ctx['request']->addOption(CURLOPT_POSTFIELDS, json_encode(['planId' => $planId]));
-        $endpoint = $ctx['cp']['url'] . '/servers/' . $ctx['serverId'] . '/backup/plan';
-        $data = $planId > 0 ? $ctx['request']->post($endpoint) : $ctx['request']->delete($endpoint);
-        Log::insert(__FUNCTION__, $ctx['request']->getRequestInfo(), $data);
-
-        $httpCode = $ctx['request']->getRequestInfo('http_code');
-        if ($httpCode == 200 || $httpCode == 204) {
-            return json_decode($data) ?: (object) ['success' => true];
-        }
-        return false;
-    }
-
     // =========================================================================
     // VNC Console
     // =========================================================================
@@ -740,40 +715,6 @@ class Module
         return false;
     }
 
-    /**
-     * Get available self-service currencies.
-     *
-     * @param int $serviceID
-     * @return array|false
-     */
-    public function getSelfServiceCurrencies($serviceID)
-    {
-        $cacheKey = 'ss_currencies';
-        $cached = Cache::get($cacheKey);
-        if ($cached !== null) {
-            return $cached;
-        }
-
-        $serviceID = (int) $serviceID;
-        $whmcsService = Database::getWhmcsService($serviceID);
-        if (!$whmcsService) return false;
-
-        $cp = $this->getCP($whmcsService->server);
-        if (!$cp) return false;
-
-        $request = $this->initCurl($cp['token']);
-        $data = $request->get($cp['url'] . '/selfService/currencies');
-
-        Log::insert(__FUNCTION__, $request->getRequestInfo(), $data);
-
-        if ($request->getRequestInfo('http_code') == 200) {
-            $result = json_decode($data, true);
-            Cache::set($cacheKey, $result, 1800);
-            return $result;
-        }
-        return false;
-    }
-
     /**
      * Decodes a response from JSON into an associative array.
      *