feat(cert-manager): Vorlagen für Zielsysteme, Modulversion 1.2.0 und Anleitungen

- Sieben Vorlagen (Nginx, Apache ab/vor 2.4.8, Windows/IIS, Nginx Proxy Manager, HAProxy, Tomcat) mit Dateien und Einrichtungszeilen
- Reiter „Vorlagen“ mit ZIP samt Anleitung, Schnipsel und Kopieren
- Modulversion 1.2.0, Modul-Changelog, CHANGELOG und drei Anleitungen

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

apps/web/src/messages/en.json

@@ -1257,7 +1257,8 @@
       "analyze": "Analyze",
       "split": "Split",
       "merge": "Merge",
-      "convert": "Convert"
+      "convert": "Convert",
+      "templates": "Templates"
     },
     "roles": {
       "end-entity": "Server certificate",
@@ -1460,6 +1461,87 @@
       "keyPassword": "Password for the key",
       "download": "Download",
       "busy": "Creating …"
+    },
+    "templates": {
+      "intro": "Choose the system the certificate is going to run on. Tessera creates the matching files with one click and shows the lines for the setup. Every template needs the server certificate and the matching private key.",
+      "chooseHead": "For which certificate should the files be created?",
+      "needsKey": "There is no matching private key for this certificate yet. Add it in the “Files” tab, then the templates become available.",
+      "delivers": "What you get",
+      "stepsTitle": "How to proceed",
+      "download": "Download template",
+      "busy": "Creating …",
+      "zipHint": "Several files come together in one ZIP file that also contains instructions.",
+      "snippetTitle": "Lines for the setup",
+      "snippetHint": "Adjust the paths to your server.",
+      "copy": "Copy",
+      "copied": "Copied",
+      "instructionsFile": "INSTRUCTIONS.txt",
+      "instructionsHeading": "Instructions for {name}",
+      "instructionsFiles": "Included files",
+      "instructionsSnippet": "Lines for the setup",
+      "nginx": {
+        "title": "Nginx",
+        "delivers": "fullchain.pem (server certificate and intermediate certificates) and privkey.pem (private key).",
+        "steps": {
+          "1": "Copy both files to your server, for example to the folder /etc/nginx/ssl.",
+          "2": "Add the two lines shown to the server block of your Nginx configuration.",
+          "3": "Check the settings with “nginx -t” and reload Nginx with “nginx -s reload”."
+        }
+      },
+      "apache": {
+        "title": "Apache 2.4.8 and newer",
+        "delivers": "fullchain.pem (server certificate and intermediate certificates) and privkey.pem (private key).",
+        "steps": {
+          "1": "Copy both files to your server, for example to the folder /etc/ssl.",
+          "2": "Add the two lines shown to the VirtualHost for port 443.",
+          "3": "Check the settings with “apachectl configtest” and reload Apache."
+        }
+      },
+      "apacheLegacy": {
+        "title": "Apache older than 2.4.8",
+        "delivers": "cert.pem (server certificate), chain.pem (intermediate certificates) and privkey.pem (private key).",
+        "steps": {
+          "1": "Copy the files to your server, for example to the folder /etc/ssl.",
+          "2": "Add the lines shown to the VirtualHost for port 443. Older Apache versions need the chain in a file of its own.",
+          "3": "Check the settings with “apachectl configtest” and reload Apache."
+        }
+      },
+      "iis": {
+        "title": "Windows / IIS",
+        "delivers": "A PFX file with certificates and key. The compatible encryption is preselected; older Windows servers can open it as well.",
+        "steps": {
+          "1": "Copy the PFX file to the Windows server.",
+          "2": "Import it by double-click into the “Local Computer” store, “Personal”, or with the PowerShell line shown. You enter the password there.",
+          "3": "Select the certificate in IIS Manager under “Bindings” of the website."
+        }
+      },
+      "npm": {
+        "title": "Nginx Proxy Manager",
+        "delivers": "certificate.pem (server certificate), intermediate.pem (intermediate certificates, if any) and privkey.pem (private key in the traditional format).",
+        "steps": {
+          "1": "In Nginx Proxy Manager open “SSL Certificates” and click “Add SSL Certificate”. Choose “Custom”.",
+          "2": "Enter a name. For “Certificate Key” choose the file privkey.pem, for “Certificate” the file certificate.pem and for “Intermediate Certificate” the file intermediate.pem.",
+          "3": "Save, then select the certificate on the proxy host in the “SSL” tab."
+        }
+      },
+      "haproxy": {
+        "title": "HAProxy",
+        "delivers": "A single PEM file with server certificate, intermediate certificates and private key.",
+        "steps": {
+          "1": "Copy the file to your server, for example to the folder /etc/haproxy/certs. Protect it, because it contains the key.",
+          "2": "Add the line shown to the frontend block of your HAProxy configuration.",
+          "3": "Reload HAProxy, for example with “systemctl reload haproxy”."
+        }
+      },
+      "tomcat": {
+        "title": "Tomcat / Java",
+        "delivers": "A file in PKCS#12 format (.p12) with certificates and key. The compatible encryption is preselected.",
+        "steps": {
+          "1": "Copy the file to your server, for example to the conf folder of Tomcat.",
+          "2": "Add the line shown to the SSLHostConfig block of server.xml and replace IHR-PASSWORT with the password you set here.",
+          "3": "Restart Tomcat."
+        }
+      }
     }
   },
   "tenderRadar": {