feat: watchtower tracking, dev environment, security logs page

- watchtower: docker-compose with label filtering, email notifications
- watchtower labels on navidrome, openclaw, immich services
- dev env: docker-compose.dev.yml (port 4001), deploy-dev.yml CI workflow
- dev.nas.jimmygan.com Caddy site block with Authelia forward_auth
- security page: backend router parsing Authelia/Caddy container logs
- security page: frontend with stats cards, timeline, top IPs, event log
- wired security route into App.svelte and Sidebar

dashboard/frontend/src/App.svelte

@@ -8,6 +8,7 @@
   import OpenClaw from "./routes/OpenClaw.svelte";
   import Settings from "./routes/Settings.svelte";
   import ChatSummary from "./routes/ChatSummary.svelte";
+  import Security from "./routes/Security.svelte";
   import Login from "./routes/Login.svelte";
   import { onMount } from "svelte";
   import { getToken, checkAuth, setToken, setRefreshToken } from "./lib/api.js";
@@ -112,6 +113,8 @@
           <ChatSummary />
         {:else if page === "settings"}
           <Settings />
+        {:else if page === "security"}
+          <Security />
         {/if}
       </div>
     </main>