Bring 15 stale entries in line with current private configs

Several of these had drifted so far they were unrecognizable (Nextcloud
was a bare minio stub, Ollama was missing the ollama service entirely,
Immich was missing 2 of 4 services). Also removed a real, exposed
Authentik OAuth client_id/secret that was sitting in Paperless-NGX's
entry (confirmed stale/rotated already, but shouldn't have been public
regardless) and stripped internal Caddy CA trust details from every
file per the same rule applied to nocodb/dashy etc.

Docker/CloudCommander/docker-compose.yaml

@@ -1,10 +1,27 @@
 services:
   cloudcmd:
-    image: coderaiser/cloudcmd
-    container_name: cloudcmd
+    image: coderaiser/cloudcmd:latest
+    container_name: cloudcommander
     ports:
-      - 8000:8000
+      - ${HTTP_PORT}:8000
     volumes:
       - ~:/root
       - /:/mnt/fs
-    restart: unless-stopped   
+    user: "1000:1000"
+    restart: unless-stopped
+    healthcheck:
+      test:
+        [
+          "CMD-SHELL",
+          "curl -fsS http://localhost:8000 | grep -qi cloudcmd || exit 1",
+        ]
+      interval: 20s
+      timeout: 5s
+      retries: 5
+      start_period: 25s
+    networks:
+      - cloudcommander-net
+
+networks:
+  cloudcommander-net:
+    external: true