normalize all stacks to conventions

- VOL_PATH always defaults to /data; vscode/opencode VOL_PROJECTS nests it
- TZ defaults to America/Vancouver (was UTC in etherpad, ntfy, redis)
- compose section order fixed (volumes before environment, command after networks)
- all default secrets are the literal ChangeThisPassword (grep-friendly,
  users must change them); removed a real key from ollama sample.env
- sample.env synced with compose: missing vars added with defaults, dead vars removed
- invoiceninja_dev/openarchiver_dev: app services had no environment block,
  wired all sample.env vars through so the stacks actually work
- opencode: sample.env OLLAMA_HOST renamed to OLLAMA_HOST_URL to match compose
- TZ values unquoted consistently

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

phpmyadmin_dev/compose.yaml

@@ -9,7 +9,7 @@ services:
       - PMA_ARBITRARY=${PHPMYADMIN_PMA_ARBITRARY:-1}
       - PMA_HOST=${PHPMYADMIN_PMA_HOST:-mariadb}
       - PMA_USER=${PHPMYADMIN_PMA_USER:-root}
-      - PMA_PASSWORD=${PHPMYADMIN_PMA_PASSWORD:-changeme}
+      - PMA_PASSWORD=${PHPMYADMIN_PMA_PASSWORD:-ChangeThisPassword}
       - UPLOAD_LIMIT=${PHPMYADMIN_UPLOAD_LIMIT:-200M}
 
     ports:

phpmyadmin_dev/sample.env

@@ -9,5 +9,5 @@ PHPMYADMIN_PORT=8083
 PHPMYADMIN_PMA_ARBITRARY=1
 PHPMYADMIN_PMA_HOST=mariadb
 PHPMYADMIN_PMA_USER=root
-PHPMYADMIN_PMA_PASSWORD=changeme
+PHPMYADMIN_PMA_PASSWORD=ChangeThisPassword
 PHPMYADMIN_UPLOAD_LIMIT=200M