Separate CP admin panel into independent Vite project at /cp/

- New /cp/ Vite project with own package.json, Dockerfile, tailwind config
- Migrated CpLoginPage, CpLayout, AdminDashboard → cp/src/ (self-contained)
- cp/src/lib/utils.ts has only what CP needs (cn, PLAN_LABELS, PLAN_COLORS)
- cp/src/data/mockData.ts has Hotel/User types and mock data
- cp/ builds to nginx static container (hotelsync-cp)
- docker-compose.yml: added cp service
- nginx: added cp.hotelsync.ru → hotelsync-cp:80 (SSL block ready for certbot)
- deploy.yml: builds hotelsync-cp:latest and restarts container on push
- Cleaned src/App.tsx: removed IS_CP branch, CpLoginPage/CpLayout/AdminDashboard imports

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

deploy/nginx/conf.d/hotelsync.conf

@@ -18,7 +18,7 @@ server {
 # ── Редирект HTTP → HTTPS ─────────────────────────────────────────────────
 server {
     listen 80;
-    server_name hotelsync.ru www.hotelsync.ru app.hotelsync.ru api.hotelsync.ru git.hotelsync.ru;
+    server_name hotelsync.ru www.hotelsync.ru app.hotelsync.ru api.hotelsync.ru git.hotelsync.ru cp.hotelsync.ru;
 
     # Certbot challenge
     location /.well-known/acme-challenge/ {
@@ -64,6 +64,25 @@ server {
     }
 }
 
+# ── cp.hotelsync.ru — Control Panel ──────────────────────────────────────
+server {
+    listen 443 ssl;
+    server_name cp.hotelsync.ru;
+
+    ssl_certificate     /etc/letsencrypt/live/cp.hotelsync.ru/fullchain.pem;
+    ssl_certificate_key /etc/letsencrypt/live/cp.hotelsync.ru/privkey.pem;
+    ssl_protocols TLSv1.2 TLSv1.3;
+    ssl_ciphers HIGH:!aNULL:!MD5;
+
+    location / {
+        proxy_pass         http://cp:80;
+        proxy_set_header   Host $host;
+        proxy_set_header   X-Real-IP $remote_addr;
+        proxy_set_header   X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header   X-Forwarded-Proto $scheme;
+    }
+}
+
 # ── api.hotelsync.ru — API Backend ────────────────────────────────────────
 server {
     listen 443 ssl;