refs #94#95#96#97
- Add rustfs/Dockerfile.mc: least-privilege mc sidecar (non-root,
read-only fs, all caps dropped, tmpfs for config)
- Add mc service to compose.yml with storage network access only
- Add rclone WebDAV service using env-based S3 config, serving
the zotero bucket with HTTP basic auth
- Add Traefik route at webdav.homelab.fhirworx.io
- Add zotero.json IAM policy for bucket access
- Add mc image to deploy, infra-ci, and rebuild-all pipelines
- Add WEBDAV_* env vars to .env.example
dd721e8497
