Reset Gokapi and log in with Pocket ID

Gokapi now keeps its config and data in /opt/stacks/gokapi instead of named
volumes. config.json is templated with Pocket ID as the OIDC provider, so a
fresh install never shows the open /setup wizard. On a new database a one-off
run with --deployment-password creates the super admin, after which only
existing users can log in.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

roles/docker/templates/gokapi-compose.yml.j2

@@ -6,15 +6,12 @@ services:
     environment:
       TZ: "UTC"
     volumes:
-      - gokapi_data:/app/data
-      - gokapi_config:/app/config
+      - ./data:/app/data
+      - ./config:/app/config
+    extra_hosts:
+      - "{{ subdomains.pocketid }}:{{ docker.hairpin_ip }}"
     labels:
       mag37.dockcheck.update: true
-volumes:
-  gokapi_data:
-    driver: local
-  gokapi_config:
-    driver: local
 networks:
   default:
     external: true