feat(auth): integrate TinyAuth SSO for NetBox authentication

Deploy TinyAuth v4 as CT 115 (192.168.2.10) to provide centralized
SSO authentication for NetBox via Nginx Proxy Manager.

**New Infrastructure:**
- CT 115: TinyAuth authentication layer
- Domain: tinyauth.apophisnetworking.net
- Integration: NPM auth_request → TinyAuth → NetBox

**Configuration:**
- Docker Compose with bcrypt-hashed credentials
- NPM advanced config for auth_request integration
- HTTPS enforcement via SSL termination

**Issues Resolved:**
- 500 Internal Server Error (Nginx config syntax)
- "IP addresses not allowed" (APP_URL domain requirement)
- Port mapping (8000:3000 for internal port 3000)
- Invalid password (bcrypt hash requirement for v4)

**Documentation:**
- Complete TinyAuth README at services/tinyauth/README.md
- Updated CLAUDE_STATUS.md with CT 115 infrastructure
- Added bug report for scribe agent tool permissions

**Note:** Container restart required on CT 115 to apply bcrypt hash

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

disaster-recovery/homelab-export-20251211-144345/configs/lxc/113-n8n n8n n8n.conf

@@ -0,0 +1,46 @@
+arch: amd64
+cores: 2
+features: nesting=1
+hostname: n8n
+memory: 4096
+nameserver: 8.8.8.8 8.8.4.4 1.1.1.1
+net0: name=eth0,bridge=vmbr0,firewall=1,gw=192.168.2.1,hwaddr=BC:24:11:BD:35:B7,ip=192.168.2.113/24,type=veth
+ostype: debian
+parent: pre-db-permission-fix
+rootfs: Vault:subvol-113-disk-0,size=20G
+searchdomain: apophisnetworking.net
+swap: 2048
+unprivileged: 1
+
+[pre-db-permission-fix]
+#Before PostgreSQL schema permission fix
+arch: amd64
+cores: 2
+features: nesting=1
+hostname: n8n
+memory: 4096
+nameserver: 8.8.8.8 8.8.4.4 1.1.1.1
+net0: name=eth0,bridge=vmbr0,firewall=1,gw=192.168.2.1,hwaddr=BC:24:11:BD:35:B7,ip=192.168.2.113/24,type=veth
+ostype: debian
+parent: pre-n8n-fix
+rootfs: Vault:subvol-113-disk-0,size=20G
+searchdomain: apophisnetworking.net
+snaptime: 1764644598
+swap: 2048
+unprivileged: 1
+
+[pre-n8n-fix]
+#Before encryption key fix 2025-12-01_12%3A58
+arch: amd64
+cores: 2
+features: nesting=1
+hostname: n8n
+memory: 4096
+nameserver: 8.8.8.8 8.8.4.4 1.1.1.1
+net0: name=eth0,bridge=vmbr0,firewall=1,gw=192.168.2.1,hwaddr=BC:24:11:BD:35:B7,ip=192.168.2.113/24,type=veth
+ostype: debian
+rootfs: Vault:subvol-113-disk-0,size=20G
+searchdomain: apophisnetworking.net
+snaptime: 1764619109
+swap: 2048
+unprivileged: 1