feat: add ChirpStack Cloudron package (Infrastructure) [#668]

ChirpStack 4.19.1 (LoRaWAN network server) as the 14th package:
official-image wrapper, digest-pinned, with only bash added to the
upstream alpine runtime. Native OIDC login wired to the Cloudron
platform provider (openid_connect backend, config regenerated every
start); postgresql + redis addons; diesel migrations auto-run.
Operator config (NetID, US915 region, gateway MQTT backend) lives in
seeded files under /app/data/config. Build green; config generation
validated through chirpstack's own TOML parser. Docs gardened to 14
packages.

Ticket: https://projects.knownelement.com/issues/668

💘 Generated with Crush

Assisted-by: Crush:glm-5.2

Package-Workspace/Infrastructure/chirpstack/CHANGELOG.md

@@ -0,0 +1,17 @@
+# Changelog
+
+## 1.0.0 — 2026-09-01
+
+Initial Cloudron package (ChirpStack 4.19.1, ticket
+[#668](https://projects.knownelement.com/issues/668)).
+
+- Official-image wrapper around `chirpstack/chirpstack:4.19.1` (digest
+  pinned); only addition to the runtime image is `bash` for `start.sh`.
+- Native OIDC login against the Cloudron platform identity provider;
+  admin bootstrap path documented (temporary `internal` auth mode).
+- PostgreSQL + Redis addons; diesel migrations auto-run at startup;
+  persistent API JWT secret under `/app/data`.
+- Config split into a per-boot generated fragment and operator-owned
+  `50-network.toml` + `region_us915_0.toml` under `/app/data/config/`.
+- Env knobs: `CHIRPSTACK_AUTH_MODE`, `CHIRPSTACK_OIDC_REGISTRATION`,
+  `CHIRPSTACK_LOG_LEVEL`.