fix(doorman): unlock dispatch via shell_command — rest_command absent [#345 #355]

rest_command integration silently fails to register on this box
(404 services, valid config+secret; root-cause pending #741).
shell_command curl is the working mechanism; arm-switch gate unchanged.
https://projects.knownelement.com/issues/355

packages/doorman.yaml

@@ -82,6 +82,15 @@ input_boolean:
     name: Doorman unlock armed
     icon: mdi:lock-open-variant
 
+shell_command:
+  # Unlock dispatch via curl — swapped from rest_command 2026-09-04: the
+  # rest_command integration silently fails to register on this box
+  # (404 on /api/services/rest_command despite valid config + secret;
+  # root-cause pending in #345/#741). curl is present in the HA core
+  # container. Token lives in the URL secret — process-list exposure
+  # accepted (isolated container).
+  doorman_unlock: "curl -sS -m 10 '{{ doorman_unlock_url }}'"
+
 rest_command:
   # Fires the doorctl endpoint on pfvsvrpi (systemd socket-activated,
   # Tailscale-bound, token+source allowlisted; self-securing relay).
@@ -174,7 +183,7 @@ automation:
                       {{ is_state('input_boolean.doorman_unlock_enabled', 'on')
                          and not (trigger.json.local_unlock | default(false) | bool(false)) }}
                 then:
-                  - action: rest_command.doorman_unlock
+                  - action: shell_command.doorman_unlock
                     continue_on_error: true
                   - action: logbook.log
                     data: