feat: page Guide publique — wiki joueur dynamique

- /guide accessible sans authentification
- 7 onglets : Démarrer, Zones, Bestiaire, Équipement, Artisanat, Forge, Boutique
- Données dynamiques (API publiques) — toujours à jour
- Endpoint /monsters/bestiary public (bestiaire complet toutes zones)
- Fix Item.type → inclut 'consumable'

src/monster/monster.controller.ts

@@ -10,7 +10,6 @@ import { PlayerQuestArc } from '../quest/player-quest-arc.entity';
 import { getUnlockedZones } from '../common/zone-access';
 
 @Controller('monsters')
-@UseGuards(AuthGuard)
 export class MonsterController {
   constructor(
     private readonly monsterService: MonsterService,
@@ -22,7 +21,14 @@ export class MonsterController {
     private readonly playerArcRepo: Repository<PlayerQuestArc>,
   ) {}
 
+  @Get('bestiary')
+  async getBestiary() {
+    const allMonsters = await this.monsterService.findAll();
+    return allMonsters;
+  }
+
   @Get('zones')
+  @UseGuards(AuthGuard)
   async getZones(@Req() req: Request) {
     const user = (req as any).user;
     const char = await this.characterRepo.findOne({ where: { userId: user.id } });
@@ -43,6 +49,7 @@ export class MonsterController {
   }
 
   @Get()
+  @UseGuards(AuthGuard)
   async findAll(@Req() req: Request) {
     const user = (req as any).user;
     const char = await this.characterRepo.findOne({ where: { userId: user.id } });