normalize all stacks to conventions

- VOL_PATH always defaults to /data; vscode/opencode VOL_PROJECTS nests it
- TZ defaults to America/Vancouver (was UTC in etherpad, ntfy, redis)
- compose section order fixed (volumes before environment, command after networks)
- all default secrets are the literal ChangeThisPassword (grep-friendly,
  users must change them); removed a real key from ollama sample.env
- sample.env synced with compose: missing vars added with defaults, dead vars removed
- invoiceninja_dev/openarchiver_dev: app services had no environment block,
  wired all sample.env vars through so the stacks actually work
- opencode: sample.env OLLAMA_HOST renamed to OLLAMA_HOST_URL to match compose
- TZ values unquoted consistently

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

yourls_dev/compose.yaml

@@ -11,11 +11,11 @@ services:
     environment:
       - YOURLS_DB_HOST=yourls-db
       - YOURLS_DB_USER=${YOURLS_DB_USER:-yourls}
-      - YOURLS_DB_PASS=${YOURLS_DB_PASSWORD:-changeme}
+      - YOURLS_DB_PASS=${YOURLS_DB_PASSWORD:-ChangeThisPassword}
       - YOURLS_DB_NAME=${YOURLS_DB_NAME:-yourls}
       - YOURLS_SITE=${YOURLS_SITE:-http://localhost:8080}
       - YOURLS_USER=${YOURLS_USER:-admin}
-      - YOURLS_PASS=${YOURLS_PASS:-changeme}
+      - YOURLS_PASS=${YOURLS_PASS:-ChangeThisPassword}
 
     ports:
       - "${YOURLS_PORT:-8080}:80"
@@ -35,10 +35,10 @@ services:
       - ${VOL_PATH:-/data}/yourls/db:/var/lib/mysql
 
     environment:
-      - MYSQL_ROOT_PASSWORD=${YOURLS_MYSQL_ROOT_PASSWORD:-changeme-root}
+      - MYSQL_ROOT_PASSWORD=${YOURLS_MYSQL_ROOT_PASSWORD:-ChangeThisPassword}
       - MYSQL_DATABASE=${YOURLS_DB_NAME:-yourls}
       - MYSQL_USER=${YOURLS_DB_USER:-yourls}
-      - MYSQL_PASSWORD=${YOURLS_DB_PASSWORD:-changeme}
+      - MYSQL_PASSWORD=${YOURLS_DB_PASSWORD:-ChangeThisPassword}
 
     networks:
       - internal

yourls_dev/sample.env

@@ -9,10 +9,10 @@ YOURLS_SITE=http://localhost:8080
 
 # Admin login
 YOURLS_USER=admin
-YOURLS_PASS=changeme
+YOURLS_PASS=ChangeThisPassword
 
 # Database
 YOURLS_DB_NAME=yourls
 YOURLS_DB_USER=yourls
-YOURLS_DB_PASSWORD=changeme
-YOURLS_MYSQL_ROOT_PASSWORD=changeme-root
+YOURLS_DB_PASSWORD=ChangeThisPassword
+YOURLS_MYSQL_ROOT_PASSWORD=ChangeThisPassword