docs(demo): synchronize all documentation with 16-service stack

Fix all documentation to match the actual running stack. Every service
count, port number, credential, network name, container name, and
dependency is now accurate across all files.

Key changes:
- Remove all stale Portainer/portainer references (replaced by Dockhand)
- Fix project name from tsysdevstack to kneldevstack everywhere
- Fix volume name pattern (underscore not dash after project name)
- Fix network names (add -network suffix, correct subnet in commands)
- Fix Homepage category from Infrastructure to Developer Tools
- Add companion services (ta-redis, ta-elasticsearch) to all service lists
- Fix Dockhand dependency description (direct socket, not proxy)
- Remove port 4005 from all host-facing health check loops and port tables
- Fix broken commands (docker exec dockhand docker version, wrong volume globs)
- Fix INFLUXDB_ADMIN_USER credential references from demo_admin to admin
- Fix Grafana datasource user to match
- Fix misleading "ports 4000-4018" range to explicit port list
- Add Docker Socket Proxy internal-only notes where applicable
- Update root AGENTS.md service categories to match compose labels

💘 Generated with Crush

Assisted-by: GLM-5.1 via Crush <crush@charm.land>

demo/AGENTS.md

@@ -8,7 +8,7 @@
 - **Dynamic User Handling**: Automatic UID/GID detection and application
 - **Security-First**: Docker socket proxy for all container operations
 - **Minimal Bind Mounts**: Prefer Docker volumes over host bind mounts. Use host bind mounts only for minimal bootstrap purposes of configuration data that needs to be persistent.
-- **Consistent Naming**: `tsysdevstack-supportstack-demo-` prefix everywhere including in the docker-compose file for the service names.
+- **Consistent Naming**: `kneldevstack-supportstack-demo-` prefix everywhere including in the docker-compose file for the service names.
 - **One-Command Deployment**: Single script deployment with full validation
 
 ### Dynamic Environment Strategy
@@ -119,8 +119,8 @@ services:
 #### Dynamic Variable Requirements
 - **UID/GID**: Current user and group detection
 - **DOCKER_GID**: Docker group ID for socket access
-- **COMPOSE_PROJECT_NAME**: `tsysdevstack-supportstack-demo`
-- **COMPOSE_NETWORK_NAME**: `tsysdevstack-supportstack-demo-network`
+- **COMPOSE_PROJECT_NAME**: `kneldevstack-supportstack-demo`
+- **COMPOSE_NETWORK_NAME**: `kneldevstack-supportstack-demo-network`
 - **Service Ports**: All configurable via environment variables
 
 ### Port Assignment Strategy
@@ -130,7 +130,7 @@ services:
 - Avoid conflicts with host services
 
 ### Network Configuration
-- Network name: `tsysdevstack_supportstack-demo`
+- Network name: `kneldevstack-supportstack-demo`
 - IP binding: `192.168.3.6:{port}` where applicable
 - Inter-service communication via container names
 - Only necessary ports exposed to host
@@ -195,7 +195,7 @@ services:
 
 ### Template-Driven Development
 - **Variable Configuration**: All settings via environment variables
-- **Naming Convention**: Consistent `tsysdevstack-supportstack-demo-` prefix
+- **Naming Convention**: Consistent `kneldevstack-supportstack-demo-` prefix
 - **User Handling**: Dynamic UID/GID detection in all services
 - **Security Integration**: Docker socket proxy for container operations
 - **Volume Strategy**: Docker volumes with dynamic naming