docs: add castopod/prime compose mirrors and refresh host snapshots

Mirror live compose for castopod and prime (qBittorrent password
redacted). Update firewalld list-all with 9200/tcp. Mark
Caddyfile.taler-host as legacy; short READMEs for new trees.

configs/prime/README.md

@@ -0,0 +1,16 @@
+# Prime — Jellyfin + qBittorrent
+
+| Item | Value |
+|------|--------|
+| Live | `/home/hernani/koopa-prime/` |
+| Compose | `compose.yml` (this dir; **no secret values**) |
+| Jellyfin | **9022** → Caddy `prime.hacktivism.ch` |
+| qBittorrent | **9023** → Caddy `bt.hacktivism.ch` |
+| Topic | `2026/2026-07-09--koopa-prime-jellyfin.md` |
+
+`WEBUI_PASSWORD` is `${WEBUI_PASSWORD}` in the mirror — live value only in  
+`koopa-admin-secrets/…/koopa-prime/` / host env (not admin-log).
+
+```bash
+cd ~/koopa-prime && podman-compose up -d
+```

configs/prime/compose.yml

@@ -0,0 +1,47 @@
+# koopa-prime — Jellyfin + qBittorrent
+# Media source: /home/hernani/Downloads
+services:
+  jellyfin:
+    image: docker.io/linuxserver/jellyfin:10.10.7
+    container_name: koopa-prime-jellyfin
+    restart: unless-stopped
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Zurich
+      - JELLYFIN_PublishedServerUrl=https://prime.hacktivism.ch
+    volumes:
+      - ./config/jellyfin:/config
+      - ./cache:/cache
+      - /home/hernani/Downloads:/media/downloads:ro
+    ports:
+      - "9022:8096"
+    labels:
+      org.hacktivism.service: jellyfin
+      org.hacktivism.host_port: "9022"
+      org.hacktivism.site: prime.hacktivism.ch
+      org.hacktivism.managed_by: koopa-admin
+
+  qbittorrent:
+    image: docker.io/linuxserver/qbittorrent:5.0.4
+    container_name: koopa-prime-qbittorrent
+    restart: unless-stopped
+    environment:
+      - PUID=1000
+      - PGID=1000
+      - TZ=Europe/Zurich
+      - WEBUI_PORT=8080
+      - WEBUI_PASSWORD=${WEBUI_PASSWORD}
+      - TORRENTING_PORT=6881
+    volumes:
+      - ./config/qbittorrent:/config
+      - /home/hernani/Downloads:/downloads
+    ports:
+      - "9023:8080"
+      - "6881:6881"
+      - "6881:6881/udp"
+    labels:
+      org.hacktivism.service: qbittorrent
+      org.hacktivism.host_port: "9023"
+      org.hacktivism.site: bt.hacktivism.ch
+      org.hacktivism.managed_by: koopa-admin