docs: update CLAUDE.md stack table + history post-v1.0.8

Resolves the AUDIT_REPORT v2 §2.2 drift findings on the stack table
and adds the v1.0.7 + v1.0.8 entries to the Historique section.

Stack table corrections :
  - Vite 5 → Vite 7.1.5 (actual version pinned in apps/web/package.json)
  - Zustand 4.5 + React Query 5.17 (was just "Zustand + React Query 5")
  - Axios 1.13 added (was unmentioned)
  - **OpenAPI typegen** row added — orval ^7 since v1.0.8 B9, single
    source. Notes the openapi-generator-cli removal explicitly so a
    future agent doesn't go looking for the legacy generator.
  - MinIO row added with the dated tag
    (RELEASE.2025-09-07T16-13-09Z) pinned in commit `4310dbb7`.
  - Elasticsearch row clarified — dev-only orphan, search uses
    Postgres FTS (was misleadingly listed as just "8.11.0").
  - CI row updated to reference all 5 active workflows
    (frontend-ci.yml was folded into ci.yml in commit `d6b5ae95`).
  - E2E row added — Playwright 1.57 with the @critical / full split.

Historique section :
  - **2026-04-23** v1.0.7 (BFG, transactions, UserRateLimiter).
  - **2026-04-26** v1.0.8 (MinIO end-to-end, orval migration, E2E
    workflow, queue+password annotations, authService 9/9).

"Dernière mise à jour" header bumped to 2026-04-26 v1.0.8.
"Architecture réelle du repo" date bumped likewise.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

CLAUDE.md

@@ -3,7 +3,7 @@
 > **Ce fichier est le system prompt de Claude Code pour le projet Veza.**
 > Il est lu automatiquement à chaque session.
 >
-> **Dernière mise à jour** : 2026-04-14 (v1.0.4, post-audit).
+> **Dernière mise à jour** : 2026-04-26 (v1.0.8, post-orval+E2E-CI session).
 > Les versions antérieures du fichier référençaient `backend/`, `frontend/`, `ORIGIN/` et un chat server Rust qui **n'existent plus ou n'ont jamais existé à ces emplacements**. Voir §Historique à la fin.
 
 ---
@@ -22,7 +22,7 @@ Tu es expert en :
 
 ---
 
-## 🏗️ Architecture réelle du repo (à jour 2026-04-14)
+## 🏗️ Architecture réelle du repo (à jour 2026-04-26)
 
 ```
 veza/
@@ -151,16 +151,20 @@ veza/
 | ------------- | ---------------------------------- | ----------------------------------------------- |
 | Backend API   | Go + Gin + GORM                    | **Go 1.25** (bumped pour golangci-lint v2.11.4) |
 | Stream        | Rust + Axum + Tokio                | Axum 0.8, Tokio 1.35                            |
-| Frontend      | React + Vite + TS strict           | React 18.2, Vite 5, TS 5.9.3                    |
-| State front   | Zustand + React Query 5            |                                                 |
+| Frontend      | React + Vite + TS strict           | React 18.2, **Vite 7.1.5**, TS 5.9.3            |
+| State front   | Zustand 4.5 + React Query 5.17     |                                                 |
+| HTTP client   | Axios 1.13                         |                                                 |
+| OpenAPI typegen | **orval ^7** (services + RQ hooks) | `apps/web/orval.config.ts`. Source unique depuis v1.0.8 B9 — `@openapitools/openapi-generator-cli` désinstallé. |
 | Postgres      | 16                                 | docker-compose pinned                           |
 | Redis         | 7                                  |                                                 |
-| Elasticsearch | 8.11.0                             | docker-compose.dev.yml                          |
+| Elasticsearch | 8.11.0                             | docker-compose.dev.yml uniquement (orphelin prod, search utilise Postgres FTS) |
 | RabbitMQ      | 3-management                       |                                                 |
 | ClamAV        | 1.4                                | SEC-MED-003                                     |
+| MinIO         | RELEASE.2025-09-07T16-13-09Z       | 4 compose files pinned (commit `4310dbb7`)      |
 | Hyperswitch   | 2026.03.11.0                       |                                                 |
 | JWT           | RS256 prod / HS256 fallback dev    | jwt v5                                          |
-| CI            | Forgejo Actions (self-hosted R720) | `.github/workflows/ci.yml` consolidé            |
+| CI            | Forgejo Actions (self-hosted R720) | `.github/workflows/{ci,e2e,go-fuzz,security-scan,trivy-fs}.yml` |
+| E2E           | Playwright 1.57 (`@critical` PR / full push+nightly) | `tests/e2e/playwright.config.ts`, runbook `docs/CI_E2E.md` |
 
 ---
 
@@ -456,6 +460,8 @@ Le repo a des commits parallèles (mainteneur + bots Forgejo). Si `git pull` don
 - **2026-03-03** : release `v1.0.0`.
 - **2026-03-13** : tag `v1.0.2`.
 - **2026-04-14** : tag `v1.0.3` existant, cible `v1.0.4` pour la release post-cleanup.
+- **2026-04-23** : release `v1.0.7` (BFG history rewrite, .git 2.3 GB → 66 MB, transactions marketplace, UserRateLimiter wired).
+- **2026-04-26** : release `v1.0.8` (MinIO storage end-to-end, OpenAPI orval migration, drop `@openapitools/openapi-generator-cli` legacy generator, E2E Playwright workflow + `--ci` seed flag, queue+password handler annotations, full authService → orval).
 
 ---