multistreaming: scenes/composition, installer build support, service updates

- multistreaming (new): RTMP ingest + multi-platform fan-out with pluggable providers (Twitch/YouTube/Kick/custom), zero-knowledge key vaults, Authelia OIDC auth, shared rooms with editor/streamer roles, single-use invites, per-account streaming grants, and scenes & composition (grid/PiP layouts, text/image overlays, per-output audio routing).
- installer: support Dockerfile build in metadata (not just image) and RSA key generation for the Authelia OIDC JWKS.
- authelia: add OIDC provider with portainer + multistreaming clients (public + PKCE).
- services: remove allprox; add nginx-proxy-manager and portainer; update lldap; regenerate catalog.

installer/src/types.ts

@@ -9,6 +9,13 @@ export interface EnvSpec {
   generate?: boolean;
 }
 
+/** An RSA private key the installer generates into a file on first install (used for Authelia OIDC signing). */
+export interface RsaKeySpec {
+  name: string;
+  path: string;
+  bits?: number;
+}
+
 export interface ServiceMetadata {
   id: string;
   name: string;
@@ -25,6 +32,7 @@ export interface ServiceMetadata {
   volumes?: Record<string, unknown>;
   networks?: Record<string, unknown>;
   env?: EnvSpec[];
+  rsaKeys?: RsaKeySpec[];
   dependsOn?: string[];
   notes?: string;
 }