infra: 2026-10-26 version audit, upgrades, UniFi re-removal

- Synapse v1.163.2, MAS 1.27.1, Traefik v3.7, node-exporter v1.12.1 (all
  nodes), cadvisor -> ghcr.io v0.60.6, alertmanager-receiver 2026.9.23,
  Gitea 1.26.4, Jellyfin 12.3, Seerr v3.5.1
- Watchtower -> nickfedor/watchtower fork, twice daily (04:00/16:00)
- Monitoring legacy node-exporter gated behind a compose profile
- unifi-os-server on .100 removed again; compose file renamed so it
  cannot be revived
- CLAUDE.md: Known Issues #40-43, service tree updates

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01NQhgEUqcaV4WM2S4hfXgHD

compose/hf-pdocker-02/gitea/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   gitea:
-    image: gitea/gitea:1.26.1
+    image: gitea/gitea:1.26.4
     container_name: gitea
     restart: unless-stopped
     labels:

compose/hf-pdocker-02/node-exporter/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   node-exporter:
-    image: prom/node-exporter:v1.7.0
+    image: prom/node-exporter:v1.12.1
     container_name: node-exporter
     hostname: hf-pdocker-02
     network_mode: host
@@ -11,14 +11,14 @@ services:
       - /sys:/host/sys:ro
       - /:/rootfs:ro
     command:
-      - '--path.procfs=/host/proc'
-      - '--path.rootfs=/rootfs'
-      - '--path.sysfs=/host/sys'
-      - '--collector.filesystem.mount-points-exclude=^/(sys|proc|dev|host|etc)($$|/)'
+      - "--path.procfs=/host/proc"
+      - "--path.rootfs=/rootfs"
+      - "--path.sysfs=/host/sys"
+      - "--collector.filesystem.mount-points-exclude=^/(sys|proc|dev|host|etc)($$|/)"
     logging:
-      driver: "json-file"
+      driver: json-file
       options:
-        max-size: "50m"
+        max-size: 50m
         max-file: "3"
     labels:
-      - "com.centurylinklabs.watchtower.enable=false"
+      - com.centurylinklabs.watchtower.enable=false

compose/hf-pdocker-02/unifi/DECOMMISSIONED.txt

@@ -0,0 +1,3 @@
+Decommissioned 2026-10-05 and again 2026-10-26 (it had been revived and was running).
+Duplicate controller; the real UniFi controller is the Podman UniFi OS Server on .150.
+Do NOT compose up. Data kept in /var/lib/unifi-os (.100) + /mnt/docker-data/configs/unifi-os/persistent.

compose/hf-pdocker-02/watchtower/docker-compose.yml

@@ -1,6 +1,6 @@
 services:
   watchtower:
-    image: containrrr/watchtower:latest
+    image: nickfedor/watchtower:latest  # containrrr/watchtower is archived upstream (2026-10-26)
     container_name: watchtower
     restart: unless-stopped
     volumes:
@@ -8,12 +8,11 @@ services:
     environment:
       - WATCHTOWER_CLEANUP=true
       - WATCHTOWER_INCLUDE_RESTARTING=true
-      - WATCHTOWER_POLL_INTERVAL=86400
+      - WATCHTOWER_SCHEDULE=0 0 4,16 * * *  # twice daily, 04:00 + 16:00 local
       - WATCHTOWER_MONITOR_ONLY=false
       - TZ=America/Chicago
       - DOCKER_API_VERSION=1.44
     mem_limit: 256M
-    memswap_limit: 256M
     logging:
       driver: "json-file"
       options: