Round 10: Add Traefik routing to monitoring services

- Added Traefik labels and routing to prometheus, grafana, loki, cadvisor
- Fixed Grafana ROOT_URL to use domain-based URL (https://grafana.${DOMAIN})
- Added uptime-kuma bypass rule in Authelia (needs initial setup)
- Updated all services to use traefik-network
- Synced domain from kelin-hass to kelin-casa across all configs
- Fixed missing tls=true label on uptime-kuma
- Note: Loki is API-only service (no web UI, accessed via Grafana)

docker-compose/core.yml

@@ -3,6 +3,12 @@
 # Deploy this stack FIRST before any other services
 # Place in /opt/stacks/core/docker-compose.yml
 
+# Service Access URLs:
+# - DuckDNS: No web UI (updates IP automatically)
+# - Traefik: https://traefik.${DOMAIN}
+# - Authelia: https://auth.${DOMAIN}
+# - Gluetun: No web UI (VPN client for other services)
+
 services:
   # DuckDNS - Dynamic DNS updater
   # Updates your public IP automatically for Let's Encrypt SSL