Add LubeLogger deployment (docker-node01)

Ansible-managed (inline-compose, file-provider router, host :8099), idempotent
(changed=0). PBS-backed pg_dump (daily, keep 14) with verified round-trip restore;
ntfy 'garage' reminder probe (.190); Diun repo-watch for new tags; Homepage
tile+widget. Secrets via ansible-vault / /etc env files / HOMEPAGE_VAR — none in repo.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

lubelogger/traefik-router.dynamic_conf.yml

@@ -0,0 +1,21 @@
+# File-provider router for LubeLogger — merged into node01
+# /home/tommy/traefik/dynamic_conf.yml (live) under http.routers and http.services.
+# Traefik watch=true hot-reloads on change. (Reference copy; the live file is authoritative.)
+
+# --- under http.routers: ---
+    lubelogger:
+      rule: "Host(`lubelogger.goattw.net`)"
+      entryPoints:
+        - websecure
+      middlewares:
+        - authelia-auth@file        # crowdsec-bouncer@file applies globally at the websecure entrypoint
+      service: lubelogger-service
+      tls:
+        certResolver: letsencrypt
+
+# --- under http.services: ---
+    lubelogger-service:
+      loadBalancer:
+        servers:
+          - url: "http://192.168.99.186:8099"
+        serversTransport: default-transport