Add docker actions, arr profile enforcer, monitor caching, and web file symlink

Web files now served via symlink to the git repo so git pull changes survive
reboots without rebuilding the txz. Also includes: docker pull/rebuild/restart
with live log streaming, arr_profile_enforcer for Sonarr/Radarr quality
profiles, monitor page cache fix (background writer now in cron), and
ARR_KIDS/SONARR/RADARR profile name vars in master.conf.

Deployment/host.conf.template

@@ -202,6 +202,12 @@
         # "/mnt/user/appdata-Fallback/Critical-Data" # critical-data profile
     )
 
+# ━━━ Monthly Sync Shares ━━━
+# Shares synced by monthly_maintenance.sh. Add here when ready.
+    HOSTN_MONTHLY_SYNC_SHARES=(
+        # Add shares here
+    )
+
 # ━━━ Intermediate Sync Shares ━━━
 # Shares synced every 4 hours. Leave empty to skip mid-day rsync.
     HOSTN_INTERMEDIATE_SYNC_SHARES=(

Deployment/master.conf.template

@@ -485,6 +485,7 @@
 #   INTERMEDIATE_RSYNC_ENABLED=false  ← skip 4h arr/mid-day rsync during rebuild
 #   DAILY_RSYNC_ENABLED=false         ← skip daily HDD syncs during rebuild
 #   WEEKLY_RSYNC_ENABLED=true         ← Emby + Critical-Data still sync (NVMe)
+#   MONTHLY_RSYNC_ENABLED=true        ← monthly_maintenance.sh rsync section
 #   FALLBACK_RSYNC_ENABLED=true       ← handback writeback still works
 #   → Run individual: bash Rsync/rsync.sh /mnt/user/Movies
 #   → When ready: INTERMEDIATE_RSYNC_ENABLED=true  DAILY_RSYNC_ENABLED=true
@@ -493,6 +494,7 @@
     INTERMEDIATE_RSYNC_ENABLED=true     # Tier 2 — intermediate_sync_maintenance.sh rsync section
     DAILY_RSYNC_ENABLED=true            # Tier 2 — daily_sync_maintenance.sh rsync section
     WEEKLY_RSYNC_ENABLED=true           # Tier 2 — weekly_sync_maintenance.sh rsync section
+    MONTHLY_RSYNC_ENABLED=true          # Tier 2 — monthly_maintenance.sh rsync section
     FALLBACK_RSYNC_ENABLED=true         # Tier 2 — fallback.sh writeback jobs on handback
 
 # ━━━ Download Webhook ━━━
@@ -1031,6 +1033,13 @@
     RADARR_VERSION_MAJOR=6
     LIDARR_VERSION_MAJOR=3
 
+# arr_profile_enforcer.sh — quality profile names by root folder type
+# Root folder paths containing "kids" or "anime" → ARR_KIDS_PROFILE_NAME
+# All other root folders                          → ARR_*_DEFAULT_PROFILE
+    ARR_KIDS_PROFILE_NAME="Kids shows"
+    ARR_SONARR_DEFAULT_PROFILE="Any"
+    ARR_RADARR_DEFAULT_PROFILE="Any (mine)"
+
 # Lidarr shared settings
     LIDARR_LOCK_WARN_AGE=3600       # 1hr — large libraries take time, not stuck
     LIDARR_ORPHAN_AGE=7             # days — files must be older than this before eligible for deletion