feat: migrate all stacks to Coolify (proxy network, clean labels, pull_policy)

- Remove traefik.enable, traefik.docker.network, traefik.http.routers.* from all services
- Keep traefik.http.services.<name>.loadbalancer.server.port labels
- Keep all middleware definitions (forwardauth, headers, redirects)
- Add pull_policy: always to main/frontend services
- Add proxy network + label to gitea and karakeep (previously missing)
- Add COOLIFY-TEMPLATE.md reference guide

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

gitea/docker-compose.yml

@@ -65,8 +65,11 @@ services:
       - ${GITEA_DATA_PATH}:/data:Z
     networks:
       - gitea
+      - proxy
     ports:
       - "${GITEA_SSH_PORT}:${GITEA_SSH_PORT}"
+    labels:
+      traefik.http.services.gitea.loadbalancer.server.port: "${GITEA_HTTP_PORT}"
 
   gitea-runner:
     image: ${GITEA_RUNNER_IMAGE}
@@ -88,3 +91,5 @@ services:
 networks:
   gitea:
     driver: bridge
+  proxy:
+    external: true