Platform-agnostic refactor: eliminate OS-specific hardcodes from core scripts

All bash scripts are now platform-neutral. Unraid-specific paths, commands,
and service checks moved to Plugin/unraid/adapter.sh. Core scripts call
platform_*() functions exclusively — no direct OS paths in runtime logic.

New adapter functions: platform_storage_path, platform_webui_install_path,
platform_scripts_dir_probe_cmd, platform_setup_db_path, platform_storage_healthy,
platform_is_service_enabled, platform_get_temp_thresholds, platform_disk_states_path,
platform_rebuild_container, platform_push_conf, platform_push_setup_state,
platform_get_templates_dir, platform_send_os_notification.

Partnership services stack (Emby/Jellyfin/Seerr/SeerrFin) added as third
onboarding stack alongside auth and arr stacks.

Plugin/unraid/Partnership/containers.sh

@@ -214,15 +214,16 @@ deploy_xml_stack() {
 cleanup_deployed_stack_on_remote() {
     local remote_ip="$1" ssh_key="$2"
     local -a xml_names=()
-    [[ ${#PARTNERSHIP_AUTH_STACK[@]} -gt 0 ]] && xml_names+=("${PARTNERSHIP_AUTH_STACK[@]}")
-    [[ ${#PARTNERSHIP_ARR_STACK[@]}  -gt 0 ]] && xml_names+=("${PARTNERSHIP_ARR_STACK[@]}")
+    [[ ${#PARTNERSHIP_AUTH_STACK[@]}     -gt 0 ]] && xml_names+=("${PARTNERSHIP_AUTH_STACK[@]}")
+    [[ ${#PARTNERSHIP_ARR_STACK[@]}      -gt 0 ]] && xml_names+=("${PARTNERSHIP_ARR_STACK[@]}")
+    [[ ${#PARTNERSHIP_SERVICES_STACK[@]} -gt 0 ]] && xml_names+=("${PARTNERSHIP_SERVICES_STACK[@]}")
 
     if [[ ${#xml_names[@]} -eq 0 ]]; then
-        log "No auth/arr stack arrays configured — skipping deployed stack cleanup"
+        log "No auth/arr/services stack arrays configured — skipping deployed stack cleanup"
         return 0
     fi
 
-    log "Removing owner-deployed containers (auth/arr stacks) from $MIRROR..."
+    log "Removing owner-deployed containers (auth/arr/services stacks) from $MIRROR..."
     for xml_name in "${xml_names[@]}"; do
         [[ -z "$xml_name" ]] && continue
         local xml_file="${TEMPLATES_DIR}/${xml_name}"
@@ -289,15 +290,21 @@ cleanup_deployed_stack_locally() {
             "source '$SCRIPTS_ROOT/load_config.sh' 2>/dev/null
              detect_hosts 2>/dev/null
              printf '%s\n' \"\${PARTNERSHIP_ARR_STACK[@]:-}\"" 2>/dev/null | grep -v '^$')
-        xml_names=("${auth_arr[@]}" "${arr_arr[@]}")
+        local -a svc_arr
+        mapfile -t svc_arr < <(timeout "$SSH_TIMEOUT" ssh -i "$ssh_key" \
+            -o ConnectTimeout="$SSH_TIMEOUT" -o BatchMode=yes root@"$owner_ip" \
+            "source '$SCRIPTS_ROOT/load_config.sh' 2>/dev/null
+             detect_hosts 2>/dev/null
+             printf '%s\n' \"\${PARTNERSHIP_SERVICES_STACK[@]:-}\"" 2>/dev/null | grep -v '^$')
+        xml_names=("${auth_arr[@]}" "${arr_arr[@]}" "${svc_arr[@]}")
     fi
 
     if [[ ${#xml_names[@]} -eq 0 ]]; then
-        log "Could not read deployed stack from owner — skipping auth/arr cleanup"
+        log "Could not read deployed stack from owner — skipping auth/arr/services cleanup"
         return 0
     fi
 
-    log "Removing owner-deployed containers (auth/arr stacks) locally..."
+    log "Removing owner-deployed containers (auth/arr/services stacks) locally..."
     for xml_name in "${xml_names[@]}"; do
         [[ -z "$xml_name" ]] && continue
         local xml_file="${TEMPLATES_DIR}/${xml_name}"
@@ -336,3 +343,74 @@ cleanup_deployed_stack_locally() {
     done
 }
 
+# ==============================================================================================
+# ── Reconfigure a container's WebUI on the remote server ─────────────────────────────────────
+# ==============================================================================================
+reconfigure_webui() {
+    local container="$1" port="$2" target_ip="$3"
+    local ssh_key="$4" remote_ip="$5" label="${6:-remote}"
+
+    log "Reconfiguring $container WebUI → ${target_ip}:${port} on $label..."
+
+    if [[ "$DRY_RUN" == true ]]; then
+        warn "DRY RUN — would reconfigure $container WebUI to http://${target_ip}:${port}/"
+        return 0
+    fi
+
+    local template
+    template=$(timeout "$SSH_TIMEOUT" ssh -i "$ssh_key" \
+        -o ConnectTimeout="$SSH_TIMEOUT" root@"$remote_ip" \
+        "grep -rl '<WebUI>' '$TEMPLATES_DIR/' 2>/dev/null | \
+         xargs grep -l '\"$container\"' 2>/dev/null | head -1" 2>/dev/null)
+
+    if [[ -z "$template" ]]; then
+        warn "$container template not found on $label — WebUI needs manual reconfiguration"
+        return 1
+    fi
+
+    timeout "$SSH_TIMEOUT" ssh -i "$ssh_key" \
+        -o ConnectTimeout="$SSH_TIMEOUT" root@"$remote_ip" \
+        "sed -i 's|<WebUI>.*</WebUI>|<WebUI>http://${target_ip}:${port}/</WebUI>|g' '$template'" \
+        2>/dev/null && \
+        log "$container → http://${target_ip}:${port}/ ✅" || {
+        error "Failed to reconfigure $container WebUI on $label"
+        return 1
+    }
+}
+
+# ==============================================================================================
+# ── Reconfigure local auth WebUIs to target IP ───────────────────────────────────────────────
+# ==============================================================================================
+reconfigure_local_webuis() {
+    local target_ip="$1"
+    log "Reconfiguring local auth WebUIs → ${target_ip}..."
+
+    local failures=0
+    for entry in "${PARTNERSHIP_AUTH_WEBUIS[@]}"; do
+        [[ -z "$entry" ]] && continue
+        local container="${entry%%|*}"
+        local port="${entry##*|}"
+
+        local template
+        template=$(grep -rl '<WebUI>' "$TEMPLATES_DIR/" 2>/dev/null | \
+            xargs grep -l "\"$container\"" 2>/dev/null | head -1)
+
+        if [[ -z "$template" ]]; then
+            warn "$container template not found locally"
+            (( failures++ ))
+            continue
+        fi
+
+        if [[ "$DRY_RUN" == true ]]; then
+            warn "DRY RUN — would reconfigure $container → http://${target_ip}:${port}/"
+            continue
+        fi
+
+        sed -i "s|<WebUI>.*</WebUI>|<WebUI>http://${target_ip}:${port}/</WebUI>|g" \
+            "$template" 2>/dev/null && \
+            log "$container → http://${target_ip}:${port}/ ✅" || \
+            { error "Failed to reconfigure $container"; (( failures++ )); }
+    done
+    return $failures
+}
+