Sync workspace with Gitea: merge June/July session docs

- README + siklos-docker-services: add authentik/searxng/beszel rows, photos VM section,
  2026-06-24 cleanup notes, 2026-07-03 Portainer conversion note (jgpc naming preserved)
- Add: authentik setup docs, frigate docs/config, OCIS migration docs, AdventureLog bug
  report, install-native-apps.sh, workstation-disk-analysis.md
- Remove obsolete: cgitta-nextcloud-zip-analysis.md, kopia-restore-guide.md
- .gitignore: ocis-credentials.md (secrets stay local), *.bak

frigate-docker-compose.yml

@@ -0,0 +1,40 @@
+services:
+  frigate:
+    container_name: frigate
+    image: ghcr.io/blakeblackshear/frigate:stable-tensorrt
+    privileged: true
+    shm_size: "1024mb"
+    cpuset: "0-3,8-11"    # Pin to NUMA node 0 — co-located with GTX 1050 Ti on PCIe
+    restart: always
+    runtime: nvidia
+    environment:
+      - NVIDIA_VISIBLE_DEVICES=all
+      - NVIDIA_DRIVER_CAPABILITIES=compute,video,utility
+      - FRIGATE_RTSP_PASSWORD=restreampass
+      - GO2RTC_ALLOW_ARBITRARY_EXEC=true
+    secrets:
+      - frigate_jwt_secret
+    deploy:
+      resources:
+        limits:
+          memory: 8G    # Increased from 4G — now have 62GB, give Frigate more headroom
+        reservations:
+          devices:
+            - driver: nvidia
+              count: 1
+              capabilities: [gpu, compute, video]
+    volumes:
+      - /srv/docker/frigate/config:/config
+      - /mnt/14TB-HD/frigate/media:/media/frigate
+      - /mnt/INTEL-SSD/frigate/db:/nvme_db
+      - /etc/localtime:/etc/localtime:ro
+    ports:
+      - "5000:5000"
+      - "8971:8971"
+      - "8554:8554"
+      - "8555:8555/tcp"
+      - "8555:8555/udp"
+
+secrets:
+  frigate_jwt_secret:
+    file: /srv/docker/frigate/config/jwt_secret