Add full NAS service catalog for disaster recovery.

Compose files and configs for postgres, adguard, duckdns, homarr, neo4j,
portainer, remotely, and monitoring; RESTORE.md and sync-from-nas script.
Sanitize pgAdmin secrets; document homelab-command as separate repo.

Co-authored-by: Cursor <cursoragent@cursor.com>

docker/ha-voice-control/docker-compose.yml

@@ -25,11 +25,11 @@ services:
       - PG_HOST=localhost
       - PG_PORT=5433
       - PG_USER=mo
-      - PG_PASSWORD=${PG_PASSWORD:-WaQTUw2t}
+      - PG_PASSWORD=${PG_PASSWORD:?}
       - PG_DATABASE=homelab
       - NEO4J_URI=neo4j://localhost:49153
       - NEO4J_USER=neo4j
-      - NEO4J_PASSWORD=${NEO4J_PASSWORD:-WaQTUw2t}
+      - NEO4J_PASSWORD=${NEO4J_PASSWORD:-}
 
     volumes:
       - whisper-cache:/root/.cache/huggingface