multistreaming: scenes/composition, installer build support, service updates

- multistreaming (new): RTMP ingest + multi-platform fan-out with pluggable providers (Twitch/YouTube/Kick/custom), zero-knowledge key vaults, Authelia OIDC auth, shared rooms with editor/streamer roles, single-use invites, per-account streaming grants, and scenes & composition (grid/PiP layouts, text/image overlays, per-output audio routing).
- installer: support Dockerfile build in metadata (not just image) and RSA key generation for the Authelia OIDC JWKS.
- authelia: add OIDC provider with portainer + multistreaming clients (public + PKCE).
- services: remove allprox; add nginx-proxy-manager and portainer; update lldap; regenerate catalog.

installer/src/metadata.ts

@@ -43,6 +43,11 @@ export function validateMetadata(meta: ServiceMetadata, fallbackId: string): Val
   }
   if (!meta.compose || typeof meta.compose !== "object" || Array.isArray(meta.compose)) {
     issues.push({ path: "compose", message: "required object (docker-compose service spec)" });
+  } else if (!meta.compose.image && !meta.compose.build) {
+    issues.push({
+      path: "compose",
+      message: "must define `image` (pull an image) or `build` (build from a Dockerfile)",
+    });
   }
   if (!/^[a-z0-9][a-z0-9-]*$/.test(id)) {
     issues.push({ path: "id", message: "must be kebab-case and match the folder name" });