Bring 15 stale entries in line with current private configs

Several of these had drifted so far they were unrecognizable (Nextcloud
was a bare minio stub, Ollama was missing the ollama service entirely,
Immich was missing 2 of 4 services). Also removed a real, exposed
Authentik OAuth client_id/secret that was sitting in Paperless-NGX's
entry (confirmed stale/rotated already, but shouldn't have been public
regardless) and stripped internal Caddy CA trust details from every
file per the same rule applied to nocodb/dashy etc.

Docker/IT-Tools/docker-compose.yaml

@@ -1,7 +1,19 @@
 services:
   it-tools:
-    image: 'corentinth/it-tools:latest'  
+    image: corentinth/it-tools:latest
+    restart: unless-stopped
+    container_name: it-tools
     ports:
-      - '${HTTP_PORT}:80'  
-    restart: unless-stopped  
-    container_name: it-tools  
+      - ${HTTP_PORT}:80
+    healthcheck:
+      test: ["CMD-SHELL", "curl -fsS http://localhost/ > /dev/null || exit 1"]
+      interval: 30s
+      timeout: 5s
+      retries: 3
+      start_period: 10s
+    networks:
+      - it-tools-net
+
+networks:
+  it-tools-net:
+    external: true