infra: relocate docker-30 compose stack under vms-home/, add garage and frisbee-drills

Move the docker-30 service definitions (gitea, kanidm, vault, zot,
nginx, lab-proxy, maru-hleda-byt, fuj-management) into vms-home/ to
match the naming convention used for other hosts, and add the new
garage object-storage and frisbee-drills services alongside it.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

vms-home/docker-30/garage/garage.toml

@@ -0,0 +1,28 @@
+metadata_dir           = "/var/lib/garage/meta"
+data_dir               = "/var/lib/garage/data"
+metadata_snapshots_dir = "/var/lib/garage/snapshots"
+db_engine              = "lmdb"
+
+metadata_fsync                  = true
+metadata_auto_snapshot_interval = "6h"    # LMDB corruption insurance
+compression_level               = 2
+replication_factor              = 1        # single node; bump when you add nodes
+
+rpc_bind_addr   = "[::]:3901"
+rpc_public_addr = "127.0.0.1:3901"         # self-RPC only on single node
+rpc_secret      = "REPLACE_rpc_secret"     # openssl rand -hex 32
+
+[s3_api]
+s3_region     = "garage"
+api_bind_addr = "[::]:3900"
+root_domain   = ".s3.garage"
+
+[s3_web]
+bind_addr   = "[::]:3902"
+root_domain = ".web.garage"
+index       = "index.html"
+
+[admin]
+api_bind_addr = "[::]:3903"
+admin_token   = "REPLACE_admin_token"      # webui reads this for auth; openssl rand -hex 32
+metrics_token = "REPLACE_metrics_token"    # openssl rand -hex 32