feat(hobbs-organizer): Shield photo app (com.dayline.photos) + monitoring, links, .100 boot fix

- shield/photos-source: launcher tile + DreamService screensaver showing /photo
  (locked-down WebView, default URL baked in, files/base_url override)
- build-photos-apk.sh: containerized build on hf-pdocker-02 (JDK17, SDK 35);
  signing key kept off-repo on .100 + NAS
- Hobbs-Family-Photos-1.0.apk installed on .186 (canary) and set as its screensaver
- Prometheus probes for /api/health and /api/health/photos; Farm Manager links + group
- CLAUDE.md: .100 left the stale Swarm and its NFS mount waits for network (11-03 outage)

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01E9NnVEico3WvFxLyjy1iW3

tv app/Hobbs-Family-Organizer-Self-Hosted-v1.0.0/shield/photos-source/BUILDING.md

@@ -0,0 +1,14 @@
+# Hobbs Family Photos (Shield app)
+
+Package `com.dayline.photos`. It has a launcher tile plus an Android TV screen saver (DreamService). Both show the
+organizer's `/photo` page in a locked-down WebView.
+
+- The default URL `http://192.168.86.100:8340/photo` is baked in through `BuildConfig.DEFAULT_URL`.
+  - To override it, write `files/base_url` with `adb shell run-as com.dayline.photos`. The release build is debuggable for exactly this.
+- The signing key is **not in git**. Lose it and every future update needs an uninstall and reinstall on each TV.
+  - It lives at `/var/lib/hobbs-organizer/apk-signing/` on hf-pdocker-02, with a copy on the NAS at `/mnt/docker-data/configs/hobbs-organizer/apk-signing/`.
+  - `keystore.properties` sets `storeFile`, `storePassword`, `keyAlias` and `keyPassword`.
+- Build: `compose/hf-pdocker-02/hobbs-organizer/build-photos-apk.sh` on hf-pdocker-02. It runs a JDK 17 container with the
+  Android SDK (platform 35, build-tools 35.0.0) and Gradle 8.9, cached in the Docker volume `hobbs-android-sdk`.
+- Set it as the screen saver from the TV (Settings → Device Preferences → Screen saver), or over ADB:
+  `settings put secure screensaver_components com.dayline.photos/.PhotoDreamService`