feat: add persona landing pages for IT department, IT support, and MSPs

Adds three "who it's for" pages reachable via a new nav dropdown, each
built around a distinct day-to-day workflow rather than a reworded
homepage pitch:

- /for/it-department — the core admin/engineer audience: drift-fix,
  Ansible automation, VM provisioning, dashboards
- /for/it-support — day-to-day operators: status at a glance, one-click
  Ack, Wake-on-LAN, scheduled reboots, filterable audit log
- /for/msp — managed service providers: Satellite deployments for
  unreachable client sites, audit trail as client-facing evidence,
  self-hosted with no per-seat SaaS

The MSP page deliberately avoids claiming per-site/per-customer RBAC —
verified against netork/models/role.py that permissions are global
role-based sets, not site-scoped, and phrased the copy accordingly.

Nav.tsx's Docs dropdown logic is extracted into a reusable NavDropdown
component (open state, outside-click, route-change-close) instead of
being duplicated for the new "Für wen" dropdown, which also links to
the existing /nis2 page rather than rebuilding that persona.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

docs/PAGES.md

@@ -399,25 +399,67 @@ expanded into a readable overview with the architecture diagram (ASCII or SVG).
 
 ---
 
+## `/for/*` — Persona Pages
+
+**Purpose:** Answer "is this for me?" from the perspective of a specific
+buyer/user, instead of one generic homepage pitch. Reachable via the "Für
+wen" / "Who it's for" nav dropdown.
+
+**Shared layout:** hero (icon + heading + sub) → "Your day today" pain-point
+cards (persona-specific, concrete workflow friction) → feature-callout cards
+(only shipped capabilities, cited from `docs/PRODUCT.md`) → CTA block linking
+to `/docs/getting-started`. Same card/section classes as `/plugins`.
+
+- **`/for/it-department`** — core admin/engineer audience. Pain points:
+  per-vendor admin UIs, no single inventory view, undocumented config
+  changes, manual SSH just to check state. Features: Device Management,
+  config drift + one-click fix, Git-backed config history, Ansible
+  automation, VM Provisioning, Dashboards. Plus a short supported-drivers
+  strip linking to `/drivers`.
+- **`/for/it-support`** — day-to-day operators, less config depth. Pain
+  points: "is it up right now?", repeated manual reboots, no change record,
+  full admin access for one ticket. Features: warning system + dashboard
+  widget, one-click Ack, Wake-on-LAN, scheduled reboots/updates, filterable
+  audit log + export, roles scoped below engineer level.
+- **`/for/msp`** — managed service providers, strongest standalone buying
+  case. Pain points: unreachable client sites, no cross-client view, proving
+  what was done, client data in someone else's cloud. Features: Satellite
+  Deployments, automatic routing around unreachable sites (with the honest
+  caveat that SNMP metrics + WebSSH still need direct reach), audit trail as
+  client-facing evidence, per-technician custom roles (**not** phrased as
+  per-site RBAC — netOrk's roles are global permission sets, not
+  site-scoped), self-hosted/no per-seat SaaS.
+
+The existing `/nis2` page (security/compliance persona) is linked from the
+same dropdown rather than duplicated.
+
+---
+
 ## Global Layout
 
 ### Navigation (all pages)
 
 ```
-[ netOrk ]    Features    Drivers    Docs ▾    Plugins        [ Get started ]
+[ netOrk ]    Features    Drivers    Docs ▾    Für wen ▾    Plugins    Roadmap        [ Get started ]
 ```
 
-`Docs` is a dropdown: Getting Started / Architecture
+`Docs ▾`: Getting Started / Architecture / NIS2 Compliance / Glossary
+`Für wen ▾`: IT Department / IT Support / MSP / NIS2 Compliance (reuses the Docs dropdown's NIS2 link/label)
 
 ### Footer
 
 ```
 netOrk — self-hosted network orchestration
 
-Links:          Resources:        Legal:
-Features        Getting Started   MIT License
-Drivers         Architecture      Privacy (none collected)
+Links:          Resources:          Legal:
+Features        Getting Started     MIT License
+Drivers         Architecture        Privacy (none collected)
 Plugins         Changelog
+Roadmap         NIS2
+                Glossary
+                For IT Departments
+                For IT Support
+                For MSPs
 ```
 
 Footer background: `bg-slate-900 border-t border-slate-800`