Sync infra config: HA/Zabbix relocation, Immich storage move, new services

Accumulated uncommitted infra changes:
- Caddyfile: repoint HA/Zabbix to 192.168.1.4/.3, add ~20 new site routes
- Immich: move media to /mnt/smsg, enable CUDA ML, mem limits, rewrite backup.sh
- Add service stacks: agap-mcp, anki, family, freshrss, iperf3, kanboard,
  linkwarden, qbittorrent, radicale, syncthing, vikunja, windows
- openwebui: enable API keys; ollama: drop CPU fallback
- seafile/zabbix: extra_hosts entries; matrix: add user juris
- Remove pihole stack and stale wiki/migrate.py
- Ignore marketplace-mcp (standalone repo) and linkwarden runtime data

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LeqyaxJF2nbRXJtae2kNB2

agap-mcp/docker-compose.yml

@@ -0,0 +1,27 @@
+services:
+  agap-mcp:
+    build: .
+    restart: unless-stopped
+    network_mode: host
+    environment:
+      - PORT=3100
+      - NODE_TLS_REJECT_UNAUTHORIZED=0
+      - HTTPS_PROXY=
+      - HTTP_PROXY=
+      - ALL_PROXY=
+      - https_proxy=
+      - http_proxy=
+      - all_proxy=
+      - BITWARDENCLI_APPDATA_DIR=/bw-data
+      - BW_EMAIL=allogn@gmail.com
+      - BW_PASSWORD=${BW_PASSWORD}
+      - VAULTWARDEN_URL=http://localhost:8041
+      - GITEA_URL=http://localhost:3000
+      - HA_URL=http://192.168.1.4:8123
+      - ZABBIX_URL=http://192.168.1.4:81
+      - RADICALE_URL=http://localhost:5232
+      - RADICALE_USER=alvis
+      - KANBOARD_URL=http://localhost:4800
+      - KANBOARD_BOT_USER=claude
+    volumes:
+      - /home/alvis/.config/Bitwarden CLI:/bw-data