Expand local_machine docs and automation for connectivity, games, and ops.

Add proxy/VPN/telegram launchd and emergency runbooks; reorganize apps docs;
document JA3 CrossOver runbook and Wine troubleshooting; add GOG/HoMM game
scripts, disk cleanup guides, and gitea push-via-proxy helper. Ignore temp/.

Co-authored-by: Cursor <cursoragent@cursor.com>

docs/connectivity/matrix/Caddyfile.example

@@ -0,0 +1,27 @@
+# Пример для Caddy 2: TLS автоматически (Let's Encrypt).
+# Замените matrix.example.com и example.com на свои домены.
+#
+# Запуск Caddy на том же хосте, что и docker-compose (Synapse на 127.0.0.1:8008/8448).
+
+matrix.example.com {
+	reverse_proxy /_matrix/* 127.0.0.1:8008
+	reverse_proxy /_synapse/* 127.0.0.1:8008
+}
+
+# Федерация Matrix: S2S часто идёт на :8448. Проброс на тот же процесс Synapse.
+matrix.example.com:8448 {
+	reverse_proxy 127.0.0.1:8448
+}
+
+# Клиенты ищут .well-known на apex-домене (если server_name = example.com).
+example.com {
+	encode gzip
+	handle /.well-known/matrix/server {
+		header Content-Type application/json
+		respond `{"m.server": "matrix.example.com:443"}`
+	}
+	handle /.well-known/matrix/client {
+		header Content-Type application/json
+		respond `{"m.homeserver": {"base_url": "https://matrix.example.com"}}`
+	}
+}