stacks: add nextcloud Dockerfiles, fix a broken kodi compose edit

Adds the two Dockerfiles nextcloud's compose build: contexts were
already referencing but never had (custom smbclient support for the
main container, a documentserver base for euro-office) - both had
their real internal-CA-trust mechanism replaced with a comment
explaining what's there and why, per the standing rule against
publishing that detail.

Also fixes a compose bug: kodi-ma-bridge's `environment:` key had
been dropped, leaving KEY=value pairs nested under `env_file:` (which
expects file paths, not inline vars) - would have made docker-compose
try to open a file literally named `TZ=${TZ}`.

Rest of this commit is manual cleanup (comment tidying, dropped
personal media-library volume mounts, a couple of .env comment
trims).

stacks/identity-and-security/wazuh/docker-compose.yaml

@@ -1,5 +1,4 @@
 name: single-node
-# Wazuh App Copyright (C) 2017, Wazuh Inc. (License GPLv2)
 services:
   wazuh.manager:
     image: wazuh/wazuh-manager:4.14.6
@@ -18,7 +17,7 @@ services:
       - "514:514/udp"
       - "55000:55000"
     env_file:
-      - .env.secrets   # INDEXER_PASSWORD, API_PASSWORD — never committed
+      - .env.secrets
     environment:
       - TZ=${TZ}
       - INDEXER_URL=https://wazuh.indexer:9200
@@ -78,7 +77,7 @@ services:
     ports:
       - 443:5601
     env_file:
-      - .env.secrets   # INDEXER_PASSWORD, DASHBOARD_PASSWORD, API_PASSWORD — never committed
+      - .env.secrets
     environment:
       - TZ=${TZ}
       - INDEXER_USERNAME=admin