fix(pretix): increase memory limit to 6Gi; eventyay nginx sidecar; crowdsec middleware

pretix/standalone runs gunicorn + celery + celery-beat in one container
and OOMKilled at 4Gi. Increased limit to 6Gi, request to 512Mi.

eventyay: add nginx sidecar to serve static files, update health probes
to check a static asset at port 8080, add create-superuser script,
register script in manifest.

crowdsec: middleware fix (previously uncommitted).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

crowdsec/versions/v1/middleware.yaml

@@ -48,7 +48,6 @@ spec:
     browserXssFilter: true
     contentTypeNosniff: true
     forceSTSHeader: true
-    frameDeny: true
     sslRedirect: true
     stsIncludeSubdomains: true
     stsPreload: true
@@ -72,6 +71,7 @@ spec:
       X-Forwarded-Proto: https
     customResponseHeaders:
       Server: ""
+      X-Frame-Options: SAMEORIGIN
       X-Robots-Tag: noindex,nofollow,nosnippet,noarchive,notranslate,noimageindex
 ---
 apiVersion: traefik.io/v1alpha1