fix(keycloak): update user club attributes with real database UUIDs

- Replaced placeholder UUIDs (club-1-uuid, club-2-uuid) with real database UUIDs
- Updated all 5 test users via Keycloak database
- Restarted Keycloak to clear caches and apply changes

Impact:
- JWT tokens now contain real UUIDs in clubs claim
- API endpoints accept X-Tenant-Id with real UUIDs (returns 200 OK)
- Unblocks 46 remaining QA scenarios

Documentation:
- Created update-keycloak-club-uuids.py script for automation
- Added KEYCLOAK_UPDATE_GUIDE.md with step-by-step instructions
- Recorded learnings in notepad

Ref: .sisyphus/evidence/final-f3-manual-qa.md lines 465-512

.sisyphus/evidence/final-qa/infrastructure-qa.md

@@ -0,0 +1,39 @@
+# Infrastructure QA (Tasks 1-6)
+
+## Task 1: Git Repository ✅
+- Repository initialized: YES
+- `.gitignore` present: YES
+- `.editorconfig` present: YES  
+- Solution file exists: YES
+
+## Task 2: Docker Compose ✅
+- PostgreSQL: HEALTHY (port 5432)
+- Keycloak: RUNNING (port 8080)
+- API: HEALTHY (port 5001)
+- Frontend: NOT RUNNING (needs investigation but not blocking API/backend QA)
+
+## Task 3: Keycloak Realm ✅
+- Realm `workclub` accessible: YES
+- Users imported: YES (5 users found)
+- Passwords reset manually: YES (all set to testpass123)
+- Token acquisition working: YES
+
+## Task 4: Domain Model ✅
+- WorkClub.Domain project exists: YES
+- Club entity exists: YES
+- Member entity exists: YES
+- Additional entities verified via grep
+
+## Task 5: Next.js Frontend ⚠️
+- package.json present: YES
+- next.config.ts present: YES
+- tailwind.config.ts present: YES
+- Frontend container: NOT RUNNING
+- **Action**: Frontend E2E tests will need container restart
+
+## Task 6: Kustomize ✅
+- infra/k8s/base directory exists: YES
+- `kustomize build` validates: YES
+- Manifests are syntactically valid: YES
+
+**Summary**: 5/6 passing, 1 warning (frontend container). Core API/backend infrastructure VERIFIED.