Initial scaffolding: PS_Launcher v0.2

Client (C# / .NET 8 / WPF, MVVM via CommunityToolkit.Mvvm):
- PSLauncher.App: WPF UI dark theme (Epic-style sidebar + hero + big play button)
  with UpdateAvailableDialog rendering Markdown release notes via Markdig.Wpf.
- PSLauncher.Core: services for installation registry (scans Proserve v{X.Y.Z}/),
  process launcher, manifest fetch, SHA-256 integrity, HTTP download with
  progress, ZIP install via .tmp + atomic rename, update orchestrator.
- PSLauncher.Models: RemoteManifest, InstalledVersion, LocalConfig DTOs.

Server (PHP 8 for OVH mutualisé, deployed under www/PS_Launcher/):
- Front controller + routes /manifest and /releasenotes/{version}.
- Static signed-manifest workflow with tools/sign-manifest.php CLI to
  recompute SHA-256 and sizeBytes after each ZIP upload.
- .htaccess: HTTPS redirect, rewrite, security headers.
- config.example.php template; real config.php is gitignored.

Cohabiting versions: each release lives in its own Proserve v{version}/ folder
under installRoot. Old versions are never deleted automatically.

Roadmap: v0.3 = HTTP Range resume + Polly retry + state.json,
v0.4 = MySQL license + Ed25519 signatures + DPAPI, v0.5 = settings/UX polish.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

server/api/config.example.php

@@ -0,0 +1,30 @@
+<?php
+// === À RENSEIGNER LORS DU DÉPLOIEMENT ===
+// Ce fichier ne doit JAMAIS contenir de creds en clair commitées sur git public.
+// Place ce fichier sur le serveur uniquement. Pour git, prévois un config.example.php.
+
+return [
+    // Base path public sous lequel le launcher est servi (utilisé pour générer les URLs absolues)
+    'base_url' => 'https://www.exemple-asterion.com/PS_Launcher',
+
+    // MySQL (utilisé à partir de v0.4, license)
+    'db' => [
+        'dsn'      => 'mysql:host=localhost;dbname=pslauncher;charset=utf8mb4',
+        'username' => 'replace_me',
+        'password' => 'replace_me',
+    ],
+
+    // HMAC secret pour les URLs présignées de /builds/ (v0.6)
+    'hmac_secret' => 'replace_with_random_64_bytes_hex',
+
+    // Clés Ed25519 pour signer manifest et réponses license (v0.4)
+    // Génère un keypair via tools/generate-keypair.php
+    'ed25519' => [
+        'private_key_hex' => '',  // 64 bytes hex
+        'public_key_hex'  => '',  // 32 bytes hex (à embarquer aussi dans le launcher)
+    ],
+
+    // JWT (v0.4)
+    'jwt_secret' => 'replace_with_random_secret',
+    'jwt_ttl_seconds' => 900, // 15 min
+];