Add auth stack conf vars and storage mode selection to setup wizard

host.conf.template: add AUTH STACK section (NPM/lldap/Authelia) so
conf_upgrade.sh stops stripping those keys from host*.conf at 1am.

setup wizard: storage mode selector auto-detects USB vs NVMe at first
run; user can override; triggers storage_migrate.sh when mode differs
from current SCRIPTS_DIR location.

claude_startup.sh: reads HOST*_STORAGE_MODE_INTERNAL to pick internal
or appdata path rather than always requiring array to be mounted.

Configurations/host.conf.template

@@ -503,3 +503,27 @@
     HOSTN_SYS_WATCHDOG_CHECK_NETWORK=true
     HOSTN_SYS_WATCHDOG_CHECK_SSHD=true
     HOSTN_SYS_WATCHDOG_CHECK_RUNAWAY=false
+
+# ==============================================================================================
+# ── AUTH STACK ────────────────────────────────────────────────────────────────────────────────
+# ==============================================================================================
+# Credentials for the Varaverk Auth Stack page (NPM, lldap, Authelia).
+
+# ━━━ NginxProxyManager ━━━
+# Admin API runs on 7818 (not 81 — 81 is the partnership WebUI port).
+    HOSTN_NPM_URL="http://localhost:7818"
+    HOSTN_NPM_USER=""                           # NPM admin email
+    HOSTN_NPM_PASS=""                           # NPM admin password
+
+# ━━━ lldap ━━━
+    HOSTN_LLDAP_URL="http://localhost:17170"
+    HOSTN_LLDAP_USER="admin"                    # lldap admin username
+    HOSTN_LLDAP_PASS=""                         # lldap admin password
+
+# ━━━ Authelia ━━━
+    HOSTN_AUTHELIA_CONFIG="/mnt/user/appdata/Authelia/configuration.yml"
+    HOSTN_AUTHELIA_CONTAINER="Authelia"
+
+# ==============================================================================================
+# ──────────────────────── End Of HOSTn Variables ──────────────────────────────────────────────
+# ==============================================================================================