[CLAUDE] Rebrand: 3 domain huypham.vn → solutions.com.vn + migrate script

User request: anh trỏ 3 subdomain mới về VPS IP 103.124.94.38:
  - api.huypham.vn        → api.solutions.com.vn
  - admin.huypham.vn      → admin.solutions.com.vn
  - user.huypham.vn       → eoffice.solutions.com.vn

Verified DNS: cả 3 resolve 103.124.94.38 ✓

Update 17 file repo:
FE (4): fe-admin/.env.production + fe-user/.env.production
        (VITE_API_BASE_URL → https://api.solutions.com.vn)
        fe-admin/src/lib/{api,realtime}.ts + fe-user equivalents (comment)
BE (1): appsettings.Production.json.example — CORS AllowedOrigins
CI/CD (1): .gitea/workflows/deploy.yml — smoke test URL
Scripts (3): setup-iis-sites (DomainApi/Admin/User), setup-ssl (3 host),
             deploy-all (verify curls)
Docs (5): STATUS, HANDOFF, PROJECT-MAP, vps-setup, gotchas
Skill (1): iis-deploy-runbook — 3 site table + description
Email admin@huypham.vn giữ nguyên (Let's Encrypt contact — không phải
domain serve).

Thêm scripts/migrate-domains.ps1 — 1-shot VPS migration:
  1. Pre-flight: resolve DNS 3 domain → verify IP VPS khớp
  2. Add HTTP binding mới cho 3 IIS site (giữ binding cũ làm fallback)
  3. Run win-acme xin 3 cert Let's Encrypt qua HTTP-01 challenge
     (auto add HTTPS binding + http→https redirect)
  4. Verify /health/live + /health/ready + 2 FE endpoint
  5. (Optional -RemoveOld) xóa binding huypham.vn sau verify OK
Rollback: nếu fail, binding cũ vẫn active → site serve qua huypham.vn.

Anh chạy trên VPS:
  cd C:\solution-erp\scripts  ;  .\migrate-domains.ps1
  # Sau 1-2 ngày verify stable:
  .\migrate-domains.ps1 -RemoveOld -SkipCert

scripts/deploy-all.ps1

@@ -15,7 +15,7 @@
 #   - SQL Server with login 'sa' + 'vrapp' exists
 #   - .NET 10 Hosting Bundle installed
 #   - Port 80+443 firewall open
-#   - DNS api/admin/user.huypham.vn pointing to VPS
+#   - DNS api/admin/eoffice.solutions.com.vn pointing to VPS
 
 [CmdletBinding()]
 param(
@@ -120,7 +120,7 @@ if (Test-Path $example) {
 if (-not $SkipSsl) {
     Write-Banner "Step 4/4 (SSL): win-acme Let's Encrypt"
     Write-Host "WARNING: Port 80 must be reachable from Internet (Let's Encrypt HTTP-01)"
-    Write-Host "   Test from outside: curl http://api.huypham.vn"
+    Write-Host "   Test from outside: curl http://api.solutions.com.vn"
     $confirm = Read-Host "Continue? (y/N)"
     if ($confirm -eq 'y') {
         try {
@@ -151,9 +151,9 @@ Write-Banner "[OK] DEPLOY ALL DONE - $([int]$duration.TotalMinutes)m $([int]($du
 Write-Host ""
 Write-Host "Next:"
 Write-Host "  1. Verify 3 domains:"
-Write-Host "       curl https://api.huypham.vn/health/live"
-Write-Host "       curl -I https://admin.huypham.vn"
-Write-Host "       curl -I https://user.huypham.vn"
+Write-Host "       curl https://api.solutions.com.vn/health/live"
+Write-Host "       curl -I https://admin.solutions.com.vn"
+Write-Host "       curl -I https://eoffice.solutions.com.vn"
 Write-Host ""
 Write-Host "  2. Set remaining 2 Gitea secrets (if not done):"
 Write-Host "       https://git.baocaogiaoduc.vn/vietreport-admin/solution-erp/settings/actions/secrets"