stacks: add nextcloud Dockerfiles, fix a broken kodi compose edit

Adds the two Dockerfiles nextcloud's compose build: contexts were
already referencing but never had (custom smbclient support for the
main container, a documentserver base for euro-office) - both had
their real internal-CA-trust mechanism replaced with a comment
explaining what's there and why, per the standing rule against
publishing that detail.

Also fixes a compose bug: kodi-ma-bridge's `environment:` key had
been dropped, leaving KEY=value pairs nested under `env_file:` (which
expects file paths, not inline vars) - would have made docker-compose
try to open a file literally named `TZ=${TZ}`.

Rest of this commit is manual cleanup (comment tidying, dropped
personal media-library volume mounts, a couple of .env comment
trims).

stacks/media/kodi/docker-compose.yaml

@@ -3,7 +3,7 @@ services:
     image: mariadb:latest
     container_name: kodi-mariadb
     env_file:
-      - .env.secrets   # MYSQL_ROOT_PASSWORD, MYSQL_PASSWORD — never committed
+      - .env.secrets
     environment:
       - PUID=${PUID}
       - PGID=${PGID}
@@ -39,7 +39,7 @@ services:
       - ./requirements.txt:/app/requirements.txt:ro
     command: sh -c "pip install --no-cache-dir -r requirements.txt && python bridge.py"
     env_file:
-      - .env.secrets   # KODI_PASSWORD, MA_API_TOKEN — never committed
+      - .env.secrets
     environment:
       - TZ=${TZ}
       - MA_BASE_URL=${MA_BASE_URL}