Add npm, flame, kms stacks for 05-osk docker host

Portainer GitOps compose stacks for serverweb (05-osk):
- nginx-proxy-manager: reverse proxy (80/81/443), DB env-driven
- flame: internal dashboard (5005)
- kms: py-kms Windows activation server (1688)

All app stacks join the external reverseproxy-nw network.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

nginx-proxy-manager/docker-compose.yaml

@@ -0,0 +1,41 @@
+version: '3'
+services:
+  nginx-proxy-manager:
+    container_name: nginx-proxy-manager
+    image: 'jc21/nginx-proxy-manager:latest'
+    restart: always
+    ports:
+      - '80:80'
+      - '81:81'
+      - '443:443'
+    environment:
+      - DB_MYSQL_HOST=nginx-proxy-manager-db
+      - DB_MYSQL_PORT=3306
+      - DB_MYSQL_USER=npm
+      - DB_MYSQL_PASSWORD=${DB_MYSQL_PASSWORD}
+      - DB_MYSQL_NAME=npm
+    volumes:
+      - /mnt/containers/nginx-proxy-manager/container-data/data:/data:z
+      - /mnt/containers/nginx-proxy-manager/container-data/letsencrypt:/etc/letsencrypt:z
+    networks:
+      - nginx-proxy-manager-nw
+      - reverseproxy-nw
+
+  nginx-proxy-manager-db:
+    container_name: nginx-proxy-manager-db
+    image: 'jc21/mariadb-aria:latest'
+    restart: always
+    environment:
+      - MYSQL_DATABASE=npm
+      - MYSQL_USER=npm
+      - MYSQL_PASSWORD=${DB_MYSQL_PASSWORD}
+      - MYSQL_ROOT_PASSWORD=${MYSQL_ROOT_PASSWORD}
+    volumes:
+      - /mnt/containers/nginx-proxy-manager/container-data/mysql:/var/lib/mysql:Z
+    networks:
+      - nginx-proxy-manager-nw
+
+networks:
+  nginx-proxy-manager-nw:
+  reverseproxy-nw:
+    external: true