Docs/apply note: MediaMTX does not hot-reload auth settings; restart between streams after auth changes

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

configure.py

@@ -358,7 +358,7 @@ srtAddress: :8890
 # ---- auth -------------------------------------------------------------
 # Publishing is authorised by dumpd (/mtx-auth) with short-lived tokens minted for Discord-authenticated
 # members of the streamers group. Reads are allowed; viewers are gated by Caddy + Authentik. No passwords.
-# MediaMTX hot-reloads this file: changing auth needs no restart.
+# NOTE: MediaMTX hot-reloads paths/recording settings but NOT the auth section — restart after auth changes.
 authMethod: http
 authHTTPAddress: http://{auth_gw}:8081/mtx-auth
 authHTTPExclude:
@@ -469,7 +469,8 @@ def apply(domain, admin_pw, streamers, editors, auth_host="", watch_host="", dis
     run(dc + ["up", "-d", "--build"])                      # recreates only services whose compose definition changed
     run(dc + ["restart", "copyparty"])                      # copyparty re-reads its config on start
     run(dc + ["exec", "caddy", "caddy", "reload", "--config", "/etc/caddy/Caddyfile"])   # zero-downtime
-    print("  (mediamtx hot-reloads mediamtx.yml itself — live streams are not interrupted)")
+    print("  mediamtx: hot-reloads most of mediamtx.yml, but NOT auth changes. If you changed auth settings, run")
+    print("            docker compose restart mediamtx   between streams (cuts a live recording).")
 
 def show(domain, admin_pw, streamers, editors, auth_host="", watch_host="", git_host="", bot_host="", live_host=""):
     print(f"\n== domain   : {domain or '(not set)'}")