prometheus: Scrape garage metrics

gotosocial: Fix config file permissions

tailscale: Enable SNAT only for tailscale subnets

chore(deps): update louislam/uptime-kuma docker tag to v2.5.0

chore(deps): update ghcr.io/pocket-id/pocket-id docker tag to v2.12.0

chore(deps): update ghcr.io/advplyr/audiobookshelf docker tag to v2.36.0

chore(deps): update ghcr.io/mealie-recipes/mealie docker tag to v3.22.0

chore(deps): update docker.io/valkey/valkey docker tag to v9.1.1

chore(deps): update docker.io/searxng/searxng:latest docker digest to ec536bc

chore(deps): update docker.io/searxng/searxng:latest docker digest to 3bc6ae0

chore(deps): update docker.io/searxng/searxng:latest docker digest to 800a5e3

immich: Update

gotosocial: Update config

0.22.0 release.

chore(deps): update ghcr.io/pocket-id/pocket-id docker tag to v2.11.0

chore(deps): update adguard/adguardhome docker tag to v0.107.78

chore(deps): update docker.io/valkey/valkey:9.1.0 docker digest to 8e8d64b

chore(deps): update docker.io/searxng/searxng:latest docker digest to aaf56bb

Update Hetzner API key

DNS is now also managed through the cloud API key.

terraform -> opentofu

References: https://todo.xenrox.net/~xenrox/infrastructure/25

tofu_hetzner: Use hcloud provider for DNS management