normalize all stacks to conventions

- VOL_PATH always defaults to /data; vscode/opencode VOL_PROJECTS nests it
- TZ defaults to America/Vancouver (was UTC in etherpad, ntfy, redis)
- compose section order fixed (volumes before environment, command after networks)
- all default secrets are the literal ChangeThisPassword (grep-friendly,
  users must change them); removed a real key from ollama sample.env
- sample.env synced with compose: missing vars added with defaults, dead vars removed
- invoiceninja_dev/openarchiver_dev: app services had no environment block,
  wired all sample.env vars through so the stacks actually work
- opencode: sample.env OLLAMA_HOST renamed to OLLAMA_HOST_URL to match compose
- TZ values unquoted consistently

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

docmost_dev/compose.yaml

@@ -2,15 +2,15 @@ services:
   docmost:
     image: ${DOCMOST_IMAGE:-docmost/docmost:latest}
     restart: ${DOCMOST_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/docmost/storage:/app/data/storage
     environment:
       - APP_URL=${APP_URL:-http://localhost:8000}
       - APP_SECRET=${APP_SECRET}
-      - DATABASE_URL=postgresql://docmost:${DB_PASSWORD:-changeme}@db:5432/docmost?schema=public
+      - DATABASE_URL=postgresql://docmost:${DB_PASSWORD:-ChangeThisPassword}@db:5432/docmost?schema=public
       - REDIS_URL=redis://redis:6379
     ports:
       - "${DOCMOST_PORT:-8000}:3000"
-    volumes:
-      - ${VOL_PATH:-/data}/docmost/storage:/app/data/storage
     networks:
       - proxy
       - docmost_internal
@@ -23,12 +23,12 @@ services:
   db:
     image: ${POSTGRES_IMAGE:-postgres:16-alpine}
     restart: ${DOCMOST_RESTART:-unless-stopped}
+    volumes:
+      - ${VOL_PATH:-/data}/docmost/db:/var/lib/postgresql/data
     environment:
       - POSTGRES_DB=docmost
       - POSTGRES_USER=docmost
-      - POSTGRES_PASSWORD=${DB_PASSWORD:-changeme}
-    volumes:
-      - ${VOL_PATH:-/data}/docmost/db:/var/lib/postgresql/data
+      - POSTGRES_PASSWORD=${DB_PASSWORD:-ChangeThisPassword}
     networks:
       - docmost_internal
 

docmost_dev/sample.env

@@ -6,5 +6,5 @@ REDIS_IMAGE=redis:7-alpine
 DOCMOST_RESTART=unless-stopped
 DOCMOST_PORT=8000
 APP_URL=http://localhost:8000
-APP_SECRET=generate_a_long_random_string
-DB_PASSWORD=changeme
+APP_SECRET=ChangeThisPassword
+DB_PASSWORD=ChangeThisPassword