[CLAUDE] Rebrand: 3 domain huypham.vn → solutions.com.vn + migrate script

User request: anh trỏ 3 subdomain mới về VPS IP 103.124.94.38:
  - api.huypham.vn        → api.solutions.com.vn
  - admin.huypham.vn      → admin.solutions.com.vn
  - user.huypham.vn       → eoffice.solutions.com.vn

Verified DNS: cả 3 resolve 103.124.94.38 ✓

Update 17 file repo:
FE (4): fe-admin/.env.production + fe-user/.env.production
        (VITE_API_BASE_URL → https://api.solutions.com.vn)
        fe-admin/src/lib/{api,realtime}.ts + fe-user equivalents (comment)
BE (1): appsettings.Production.json.example — CORS AllowedOrigins
CI/CD (1): .gitea/workflows/deploy.yml — smoke test URL
Scripts (3): setup-iis-sites (DomainApi/Admin/User), setup-ssl (3 host),
             deploy-all (verify curls)
Docs (5): STATUS, HANDOFF, PROJECT-MAP, vps-setup, gotchas
Skill (1): iis-deploy-runbook — 3 site table + description
Email admin@huypham.vn giữ nguyên (Let's Encrypt contact — không phải
domain serve).

Thêm scripts/migrate-domains.ps1 — 1-shot VPS migration:
  1. Pre-flight: resolve DNS 3 domain → verify IP VPS khớp
  2. Add HTTP binding mới cho 3 IIS site (giữ binding cũ làm fallback)
  3. Run win-acme xin 3 cert Let's Encrypt qua HTTP-01 challenge
     (auto add HTTPS binding + http→https redirect)
  4. Verify /health/live + /health/ready + 2 FE endpoint
  5. (Optional -RemoveOld) xóa binding huypham.vn sau verify OK
Rollback: nếu fail, binding cũ vẫn active → site serve qua huypham.vn.

Anh chạy trên VPS:
  cd C:\solution-erp\scripts  ;  .\migrate-domains.ps1
  # Sau 1-2 ngày verify stable:
  .\migrate-domains.ps1 -RemoveOld -SkipCert

docs/guides/vps-setup.md

@@ -7,7 +7,7 @@
 
 - **VPS OS:** Windows Server (có IIS + SQL Server)
 - **Shared với:** VIETREPORT project — naming isolation bắt buộc
-- **DNS đã trỏ:** `api.huypham.vn`, `admin.huypham.vn`, `user.huypham.vn`, `git.baocaogiaoduc.vn` → `103.124.94.38`
+- **DNS đã trỏ:** `api.solutions.com.vn`, `admin.solutions.com.vn`, `eoffice.solutions.com.vn`, `git.baocaogiaoduc.vn` → `103.124.94.38`
 - **Prefix resources:** `SolutionErp-*` (app pool, site), `SolutionErp` (DB), `C:\inetpub\solution-erp\` (path)
 
 ## 1. Prerequisites trên VPS (đã có sẵn với VIETREPORT)
@@ -92,21 +92,21 @@ dotnet user-secrets set "ConnectionStrings:Default" "Server=localhost;Database=S
 
 ```bash
 # Health check
-curl https://api.huypham.vn/health/live     # → Healthy
-curl https://api.huypham.vn/health/ready    # → Healthy (DB probe)
+curl https://api.solutions.com.vn/health/live     # → Healthy
+curl https://api.solutions.com.vn/health/ready    # → Healthy (DB probe)
 
 # Login
-curl -X POST https://api.huypham.vn/api/auth/login \
+curl -X POST https://api.solutions.com.vn/api/auth/login \
   -H "Content-Type: application/json" \
   -d '{"email":"admin@solutionerp.local","password":"Admin@123456"}'
 # → accessToken JWT
 
 # FE
-open https://admin.huypham.vn    # fe-admin login page
-open https://user.huypham.vn     # fe-user login page
+open https://admin.solutions.com.vn    # fe-admin login page
+open https://eoffice.solutions.com.vn     # fe-user login page
 
 # SSL grade
-# https://www.ssllabs.com/ssltest/analyze.html?d=api.huypham.vn
+# https://www.ssllabs.com/ssltest/analyze.html?d=api.solutions.com.vn
 ```
 
 ## 7. Sau go-live (bắt buộc)
@@ -114,7 +114,7 @@ open https://user.huypham.vn     # fe-user login page
 - [ ] **Đổi password admin** từ `Admin@123456` → mạnh. Warning log xuất hiện khi còn dùng default.
 - [ ] **Rotate secrets** đã post trong chat (SA, vrapp, Gitea token, JWT) — tất cả đã vượt khỏi VPS, cần đổi mới
 - [ ] **Backup SQL** daily schedule: `schtasks /Create /TN 'SolutionErp SQL Backup' /TR 'powershell -File C:\solution-erp\scripts\backup-sql.ps1 -SaPassword <pw>' /SC DAILY /ST 02:00 /RU SYSTEM`
-- [ ] **Disable Swagger prod**: Program.cs đã có `if (IsDevelopment())` — verify URL `https://api.huypham.vn/swagger` → 404
+- [ ] **Disable Swagger prod**: Program.cs đã có `if (IsDevelopment())` — verify URL `https://api.solutions.com.vn/swagger` → 404
 - [ ] **Monitor**: kiểm `C:\inetpub\solution-erp\logs\` ngày đầu, watch for ERR
 
 ## 8. Co-existence với VIETREPORT — checklist