feat(demo): restore ArchiveBox, TubeArchivist, Atuin and fix all service configs

Restore 3 services that were previously removed due to health issues,
bringing the stack to 16 services. Add companion services (Elasticsearch,
Redis) required by TubeArchivist.

Key changes:
- Add ArchiveBox with proper health check and admin credentials
- Add TubeArchivist with ta-redis and ta-elasticsearch companions
- Add Atuin server with correct `server start` command and TCP health check
- Fix Wakapi health check to use /app/healthcheck binary
- Add Grafana provisioning bind mount for datasources/dashboards
- Add Homepage config bind mount for docker.yaml
- Fix Docker Socket Proxy label (remove unreachable localhost:4005 href)
- Fix credentials: INFLUXDB_ADMIN_USER and TA_USERNAME → admin
- Fix Grafana datasources.yml user to match
- Fix homepage/docker.yaml to contain Docker provider config
- Add all missing env vars (TA_PASSWORD, ELASTIC_PASSWORD, ES_JAVA_OPTS, etc.)
- Remove Pi-hole port 53 bindings (DNS not needed for demo)
- Bump template version to 2.0

💘 Generated with Crush

Assisted-by: GLM-5.1 via Crush <crush@charm.land>

demo/demo.env

@@ -1,12 +1,12 @@
 # TSYS Developer Support Stack - Demo Environment Configuration
 # Project Identification
-COMPOSE_PROJECT_NAME=tsysdevstack-supportstack-demo
-COMPOSE_NETWORK_NAME=tsysdevstack-supportstack-demo-network
+COMPOSE_PROJECT_NAME=kneldevstack-supportstack-demo
+COMPOSE_NETWORK_NAME=kneldevstack-supportstack-demo-network
 
 # Dynamic User Detection (to be auto-populated by scripts)
 DEMO_UID=1000
 DEMO_GID=1000
-DEMO_DOCKER_GID=996
+DEMO_DOCKER_GID=986
 
 # Port Assignments (4000-4099 range)
 HOMEPAGE_PORT=4000
@@ -59,7 +59,7 @@ DOCKER_SOCKET_PROXY_PLUGINS=0
 # InfluxDB Configuration
 INFLUXDB_ORG=tsysdemo
 INFLUXDB_BUCKET=demo_metrics
-INFLUXDB_ADMIN_USER=demo_admin
+INFLUXDB_ADMIN_USER=admin
 INFLUXDB_ADMIN_PASSWORD=demo_password
 INFLUXDB_AUTH_TOKEN=demo_token_replace_in_production
 
@@ -76,7 +76,7 @@ WEBTHEME=default-darker
 ARCHIVEBOX_SECRET_KEY=demo_secret_replace_in_production
 
 # Tube Archivist Configuration
-TA_HOST=tubearchivist
+TA_HOST=http://localhost:4014
 TA_PORT=4014
 TA_DEBUG=false
 
@@ -84,6 +84,11 @@ TA_DEBUG=false
 WAKAPI_PASSWORD_SALT=demo_salt_replace_in_production
 
 # Atuin Configuration
-ATUIN_HOST=atuin
-ATUIN_PORT=4018
-ATUIN_OPEN_REGISTRATION=true
+ATUIN_HOST=0.0.0.0
+ATUIN_OPEN_REGISTRATION=true
+TA_PASSWORD=demo_password
+ELASTIC_PASSWORD=demo_password
+ES_JAVA_OPTS="-Xms512m -Xmx512m"
+ARCHIVEBOX_ADMIN_USER=admin
+ARCHIVEBOX_ADMIN_PASSWORD=demo_password
+TA_USERNAME=admin