fix(pretix): increase memory limit to 6Gi; eventyay nginx sidecar; crowdsec middleware

pretix/standalone runs gunicorn + celery + celery-beat in one container
and OOMKilled at 4Gi. Increased limit to 6Gi, request to 512Mi.

eventyay: add nginx sidecar to serve static files, update health probes
to check a static asset at port 8080, add create-superuser script,
register script in manifest.

crowdsec: middleware fix (previously uncommitted).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

eventyay/versions/1/manifest.yaml

@@ -1,4 +1,4 @@
-version: main-2
+version: main-5
 requires:
   - name: postgres
   - name: redis
@@ -23,6 +23,16 @@ defaultConfig:
     port: '{{ .apps.smtp.port }}'
     from: '{{ .apps.smtp.from }}'
     user: '{{ .apps.smtp.user }}'
+scripts:
+  - name: create-superuser
+    path: scripts/create-superuser.sh
+    description: "Create an Eventyay superuser account for first-time setup."
+    params:
+      - name: EMAIL
+        description: Email address for the superuser account
+        required: true
+      - name: PASSWORD
+        description: Password (leave blank to generate a random one)
 defaultSecrets:
   - key: dbPassword
   - key: djangoSecret