normalize all stacks to conventions

- VOL_PATH always defaults to /data; vscode/opencode VOL_PROJECTS nests it
- TZ defaults to America/Vancouver (was UTC in etherpad, ntfy, redis)
- compose section order fixed (volumes before environment, command after networks)
- all default secrets are the literal ChangeThisPassword (grep-friendly,
  users must change them); removed a real key from ollama sample.env
- sample.env synced with compose: missing vars added with defaults, dead vars removed
- invoiceninja_dev/openarchiver_dev: app services had no environment block,
  wired all sample.env vars through so the stacks actually work
- opencode: sample.env OLLAMA_HOST renamed to OLLAMA_HOST_URL to match compose
- TZ values unquoted consistently

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

duplicati_dev/compose.yaml

@@ -9,8 +9,8 @@ services:
       - ${VOL_PATH:-/data}/duplicati/restore:/restore
     environment:
       - TZ=${TZ:-America/Vancouver}
-      - SETTINGS_ENCRYPTION_KEY=${DUPLICATI_KEY:-ThisNeedsToChange}
-      - DUPLICATI__WEBSERVICE_PASSWORD=${DUPLICATI_PASS:-changeMe}
+      - SETTINGS_ENCRYPTION_KEY=${DUPLICATI_KEY:-ChangeThisPassword}
+      - DUPLICATI__WEBSERVICE_PASSWORD=${DUPLICATI_PASS:-ChangeThisPassword}
     ports:
       - "${DUPLICATI_PORT:-8200}:8200"
     networks:

duplicati_dev/sample.env

@@ -5,6 +5,6 @@ DUPLICATI_RESTART=unless-stopped
 DUPLICATI_PORT=8200
 
 # Duplicati
-DUPLICATI_KEY=ThisNeedsToChange
-DUPLICATI_PASS=changeMe
+DUPLICATI_KEY=ChangeThisPassword
+DUPLICATI_PASS=ChangeThisPassword
 TZ=America/Vancouver