Initial commit: Clean DSS implementation

Migrated from design-system-swarm with fresh git history.
Old project history preserved in /home/overbits/apps/design-system-swarm

Core components:
- MCP Server (Python FastAPI with mcp 1.23.1)
- Claude Plugin (agents, commands, skills, strategies, hooks, core)
- DSS Backend (dss-mvp1 - token translation, Figma sync)
- Admin UI (Node.js/React)
- Server (Node.js/Express)
- Storybook integration (dss-mvp1/.storybook)

Self-contained configuration:
- All paths relative or use DSS_BASE_PATH=/home/overbits/dss
- PYTHONPATH configured for dss-mvp1 and dss-claude-plugin
- .env file with all configuration
- Claude plugin uses ${CLAUDE_PLUGIN_ROOT} for portability

Migration completed: $(date)
🤖 Clean migration with full functionality preserved

infra/dss.overbits.luz.uy.conf

@@ -0,0 +1,41 @@
+# Design System Server (DSS) - Nginx Configuration
+# Domain: dss.overbits.luz.uy
+# Port: 3456
+#
+# Installation:
+#   sudo cp /home/overbits/apps/design-system-swarm/infra/dss.overbits.luz.uy.conf /etc/nginx/sites-available/
+#   sudo ln -sf /etc/nginx/sites-available/dss.overbits.luz.uy.conf /etc/nginx/sites-enabled/
+#   sudo certbot --nginx -d dss.overbits.luz.uy
+#   sudo nginx -t && sudo systemctl reload nginx
+#
+# Note: Remove old ds.overbits.luz.uy.conf after migration
+
+server {
+    server_name dss.overbits.luz.uy;
+
+    access_log /var/log/nginx/dss_overbits_access.log;
+    error_log /var/log/nginx/dss_overbits_error.log;
+
+    auth_basic "DSS Restricted";
+    auth_basic_user_file /etc/nginx/.htpasswd_ds_overbits;
+
+    # All requests go to the Fastify server on port 3456
+    location / {
+        proxy_pass http://127.0.0.1:3456;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Real-IP $remote_addr;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection "upgrade";
+
+        # Timeouts for long-running operations
+        proxy_connect_timeout 60s;
+        proxy_send_timeout 60s;
+        proxy_read_timeout 60s;
+    }
+
+    # Certbot will add SSL config below
+    listen 80;
+}