feat(auth): integrate TinyAuth SSO for NetBox authentication

Deploy TinyAuth v4 as CT 115 (192.168.2.10) to provide centralized
SSO authentication for NetBox via Nginx Proxy Manager.

**New Infrastructure:**
- CT 115: TinyAuth authentication layer
- Domain: tinyauth.apophisnetworking.net
- Integration: NPM auth_request → TinyAuth → NetBox

**Configuration:**
- Docker Compose with bcrypt-hashed credentials
- NPM advanced config for auth_request integration
- HTTPS enforcement via SSL termination

**Issues Resolved:**
- 500 Internal Server Error (Nginx config syntax)
- "IP addresses not allowed" (APP_URL domain requirement)
- Port mapping (8000:3000 for internal port 3000)
- Invalid password (bcrypt hash requirement for v4)

**Documentation:**
- Complete TinyAuth README at services/tinyauth/README.md
- Updated CLAUDE_STATUS.md with CT 115 infrastructure
- Added bug report for scribe agent tool permissions

**Note:** Container restart required on CT 115 to apply bcrypt hash

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>

disaster-recovery/homelab-export-20251211-144345/configs/vms/108-CML.conf

@@ -0,0 +1,17 @@
+bios: ovmf
+boot: order=scsi0;net0;ide0
+cores: 4
+cpu: host
+efidisk0: local-lvm:vm-108-disk-0,efitype=4m,pre-enrolled-keys=1,size=4M
+ide0: iso-share:iso/refplat-20241223-fcs.iso,media=cdrom,size=12426624K
+memory: 32000
+meta: creation-qemu=9.0.2,ctime=1751066715
+name: CML
+net0: virtio=BC:24:11:70:E6:08,bridge=vmbr0,firewall=1
+numa: 0
+ostype: l26
+scsi0: Vault:vm-108-disk-0,iothread=1,size=100G
+scsihw: virtio-scsi-single
+smbios1: uuid=36809984-61ba-452d-8fa3-78cea42b5e57
+sockets: 1
+vmgenid: 7c6b3c35-3e83-4c3e-ac89-823f4395b3dc