feat: enhance security logging and ensure rate limit blocks are properly tracked

- Add comprehensive logging for rate limit blocks with full request details
  - IP address (with proper proxy detection), user agent, headers, timestamps
  - Rate limit info (current count, limit, remaining, reset time)
  - Separate tracking for auth vs general endpoints

- Enhance authentication failure logging
  - JWT validation failures with detailed error info
  - Admin auth attempts without token
  - Failed token validation with user context
  - All events include IP, path, method, user agent

- Improve Winston logger configuration for production
  - Add automatic log rotation (10MB errors, 50MB combined)
  - Create separate security.log for auth/rate limit events
  - Ensure logs directory exists automatically
  - Add structured JSON format for log aggregation
  - Support container logging with LOG_TO_CONSOLE env var

- Create comprehensive documentation
  - Security logging guide with examples
  - Monitoring recommendations
  - Configuration reference

- Add test script to verify logging functionality

All rate limit settings remain configurable via admin panel:
- Window duration, max requests, auth limits
- Skip authenticated requests option
- Public endpoints only option

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

frontend/src/pages/admin/CMSPage.tsx

@@ -184,21 +184,12 @@ export const CMSPage: React.FC = () => {
                 <CMSEditor
                   content={editingLang === 'en' ? editForm.content_en || '' : editForm.content_de || ''}
                   onChange={handleContentChange}
+                  onSave={handleSave}
+                  isSaving={updateMutation.isPending}
                 />
               </div>
             </div>
 
-            <div className="mt-6 flex justify-end gap-3">
-              <Button
-                variant="primary"
-                onClick={handleSave}
-                isLoading={updateMutation.isPending}
-                leftIcon={<Save className="w-4 h-4" />}
-              >
-                {t('cms.saveChanges')}
-              </Button>
-            </div>
-
             {currentPage?.updated_at && (
               <p className="text-xs text-neutral-500 mt-4">
                 {t('cms.lastUpdated')} {new Date(currentPage.updated_at).toLocaleString()}

frontend/src/pages/admin/CreateEventPageEnhanced.tsx

@@ -15,7 +15,7 @@ import { enUS, de } from 'date-fns/locale';
 import { toast } from 'react-toastify';
 
 import { Button, Input, Card } from '../../components/common';
-import { ThemeCustomizerEnhanced, GalleryPreview } from '../../components/admin';
+import { ThemeCustomizerEnhanced, GalleryPreview, WelcomeMessageEditor } from '../../components/admin';
 import { useMutation, useQuery } from '@tanstack/react-query';
 import { eventsService } from '../../services/events.service';
 import { categoriesService } from '../../services/categories.service';
@@ -320,12 +320,11 @@ export const CreateEventPageEnhanced: React.FC = () => {
               <label className="block text-sm font-medium text-neutral-700 mb-2">
                 {t('events.welcomeMessage')}
               </label>
-              <textarea
+              <WelcomeMessageEditor
                 value={formData.welcome_message}
-                onChange={handleInputChange('welcome_message')}
+                onChange={(value) => setFormData(prev => ({ ...prev, welcome_message: value }))}
                 placeholder={t('events.welcomeMessagePlaceholder')}
-                className="w-full px-3 py-2 border border-neutral-300 rounded-lg focus:ring-2 focus:ring-primary-500 focus:border-primary-500"
-                rows={3}
+                rows={4}
               />
             </div>
           </div>