feat: add auth.ridentity.online as EncryptID route alias

Add ridentity.online and auth.ridentity.online to Traefik router rules,
WebAuthn Related Origins, and CORS allowed origins. This enables the
ridentity.online domain to serve as the branded identity layer while
keeping the RP ID on rspace.online (no passkey breakage).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

docker-compose.encryptid.yml

@@ -25,7 +25,7 @@ services:
     labels:
       # Traefik auto-discovery
       - "traefik.enable=true"
-      - "traefik.http.routers.encryptid.rule=Host(`auth.rspace.online`) || Host(`encryptid.jeffemmett.com`)"
+      - "traefik.http.routers.encryptid.rule=Host(`auth.rspace.online`) || Host(`auth.ridentity.online`) || Host(`encryptid.jeffemmett.com`)"
       - "traefik.http.routers.encryptid.entrypoints=web"
       - "traefik.http.routers.encryptid.priority=150"
       - "traefik.http.services.encryptid.loadbalancer.server.port=3000"
@@ -34,6 +34,11 @@ services:
       - "traefik.http.routers.encryptid-wellknown.entrypoints=web"
       - "traefik.http.routers.encryptid-wellknown.priority=200"
       - "traefik.http.routers.encryptid-wellknown.service=encryptid"
+      # Serve .well-known/webauthn from ridentity.online too
+      - "traefik.http.routers.encryptid-wellknown-rid.rule=Host(`ridentity.online`) && PathPrefix(`/.well-known/webauthn`)"
+      - "traefik.http.routers.encryptid-wellknown-rid.entrypoints=web"
+      - "traefik.http.routers.encryptid-wellknown-rid.priority=200"
+      - "traefik.http.routers.encryptid-wellknown-rid.service=encryptid"
     networks:
       - traefik-public
       - encryptid-internal

src/encryptid/server.ts

@@ -105,6 +105,9 @@ const CONFIG = {
     'https://rstack.online',
     'https://rpubs.online',
     'https://rauctions.online',
+    'https://ridentity.online',
+    'https://auth.ridentity.online',
+    'https://rphotos.online',
     // Development
     'http://localhost:3000',
     'http://localhost:5173',