feat: enhance security logging and ensure rate limit blocks are properly tracked

- Add comprehensive logging for rate limit blocks with full request details
  - IP address (with proper proxy detection), user agent, headers, timestamps
  - Rate limit info (current count, limit, remaining, reset time)
  - Separate tracking for auth vs general endpoints

- Enhance authentication failure logging
  - JWT validation failures with detailed error info
  - Admin auth attempts without token
  - Failed token validation with user context
  - All events include IP, path, method, user agent

- Improve Winston logger configuration for production
  - Add automatic log rotation (10MB errors, 50MB combined)
  - Create separate security.log for auth/rate limit events
  - Ensure logs directory exists automatically
  - Add structured JSON format for log aggregation
  - Support container logging with LOG_TO_CONSOLE env var

- Create comprehensive documentation
  - Security logging guide with examples
  - Monitoring recommendations
  - Configuration reference

- Add test script to verify logging functionality

All rate limit settings remain configurable via admin panel:
- Window duration, max requests, auth limits
- Skip authenticated requests option
- Public endpoints only option

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>

frontend/src/pages/admin/CMSPage.tsx

@@ -184,21 +184,12 @@ export const CMSPage: React.FC = () => {
                 <CMSEditor
                   content={editingLang === 'en' ? editForm.content_en || '' : editForm.content_de || ''}
                   onChange={handleContentChange}
+                  onSave={handleSave}
+                  isSaving={updateMutation.isPending}
                 />
               </div>
             </div>
 
-            <div className="mt-6 flex justify-end gap-3">
-              <Button
-                variant="primary"
-                onClick={handleSave}
-                isLoading={updateMutation.isPending}
-                leftIcon={<Save className="w-4 h-4" />}
-              >
-                {t('cms.saveChanges')}
-              </Button>
-            </div>
-
             {currentPage?.updated_at && (
               <p className="text-xs text-neutral-500 mt-4">
                 {t('cms.lastUpdated')} {new Date(currentPage.updated_at).toLocaleString()}