update workflows and game logic: add CERT_ISSUER support, enhance offline mode with countdown, and adjust default audio settings

.github/workflows/deploy.yaml

@@ -35,11 +35,13 @@ jobs:
             APP_URL="${{ env.BASE_DOMAIN }}"
             TARGET_NS="${REPO_LOWER}"
             BUILD_MODE="main"
+            CERT_ISSUER="letsencrypt-prod"
             echo "Mode: PRODUCTION (Root Domain)"
           else
             APP_URL="${REPO_LOWER}-${BRANCH_LOWER}.${{ env.BASE_DOMAIN }}"
             TARGET_NS="${REPO_LOWER}-${BRANCH_LOWER}"
             BUILD_MODE="dev"
+            CERT_ISSUER="letsencrypt-prod"
             echo "Mode: DEVELOPMENT (Subdomain)"
           fi
 
@@ -53,6 +55,7 @@ jobs:
           echo "DEBUG: URL: $APP_URL"
           echo "DEBUG: Branch-Tag: $BRANCH_TAG"
           echo "DEBUG: Build-Mode: $BUILD_MODE"
+          echo "DEBUG: Cert-Issuer: $CERT_ISSUER"
 
           # In Gitea Actions Environment schreiben
           echo "FULL_IMAGE_PATH=$FULL_IMAGE_PATH" >> $GITHUB_ENV
@@ -62,6 +65,7 @@ jobs:
           echo "IMAGE_TAG=$IMAGE_TAG" >> $GITHUB_ENV
           echo "BRANCH_TAG=$BRANCH_TAG" >> $GITHUB_ENV
           echo "BUILD_MODE=$BUILD_MODE" >> $GITHUB_ENV
+          echo "CERT_ISSUER=$CERT_ISSUER" >> $GITHUB_ENV
 
       # 3. Prüfen ob ein Image-Rebuild nötig ist
       - name: Detect Source Changes
@@ -170,6 +174,9 @@ jobs:
           
           # TARGET_NS überall ersetzen (z.B. für Middlewares oder explizite Namespaces)
           find k8s/ -name "*.yaml" -exec sed -i "s|\${TARGET_NS}|${{ env.TARGET_NS }}|g" {} +
+          
+          # CERT_ISSUER in allen K8s-Manifesten ersetzen
+          find k8s/ -name "*.yaml" -exec sed -i "s|\${CERT_ISSUER}|${{ env.CERT_ISSUER }}|g" {} +
 
           # Admin-Credentials Secret anlegen/aktualisieren (aus Gitea Secret)
           kubectl create secret generic admin-credentials \