Vanguard media stack: ingest, copyparty, Syncthing, normalize sweep, Authentik, Jellyfin + Vanguard Metadata plugin, MariaDB, Gitea, bot runtime

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>

.env.example

@@ -0,0 +1,15 @@
+# copy to .env (configure.py --full generates it) — never commit the real one
+AUTHENTIK_SECRET_KEY=
+AUTHENTIK_PG_PASS=
+AUTHENTIK_TAG=2025.8
+WATCH_HOST=watch.example.com
+MARIADB_ROOT_PASSWORD=
+BOT_DB_NAME=vanguardbot
+BOT_DB_USER=bot
+BOT_DB_PASSWORD=
+DISCORD_BOT_TOKEN=
+DISCORD_GUILD_ID=
+GIT_HOST=git.example.com
+GITEA_DB_PASSWORD=
+GITEA_RUNNER_TOKEN=
+BOT_HOST=bot.example.com