feat: add Rathole Cloudron package (Infrastructure) [#650]

Server-mode Rathole 0.5.0 as the 11th package: pinned upstream binary
(sha256 gate) on cloudron/base:4.0.0, control port 2333 plus a 100-port
tunnel exit range, hot-reloading config in /app/data, auth-proxy verdict
(no user concept). Verified end-to-end with a live client tunnel.
Docs gardened (STATUS/README/JOURNAL to 11 packages).

Ticket: https://projects.knownelement.com/issues/650

Package-Workspace/Infrastructure/rathole/.env.example

@@ -0,0 +1,8 @@
+# Rathole Cloudron package — environment knobs
+#
+# Cloudron injects these at runtime (App -> Configure -> Environment);
+# they are not secrets.
+
+# Log level for the rathole server: error | warn | info | debug | trace.
+# Default when unset: info
+RUST_LOG=info