Introduce quadlets/network, a null_resource-based module that renders a
.network quadlet on the target host and reloads the user systemd session,
returning the network name for downstream modules to consume.
Add an https toggle that selects the MINIO_BROWSER_REDIRECT_URL scheme,
and set an explicit name on minio_iam_service_account.overlay so tenant
accounts get stable, predictable identifiers.
Replace the placeholder redis deployment in the arcane module with the
ghcr.io/ofkm/arcane image (env-based secrets, haproxy routing, podman
socket mount) and convert oci-proxy into a tecnativa/docker-socket-proxy
container exposing a locked-down subset of the engine API.
Add AutoUpdate=registry and Network=containers.network to the generated
container quadlet, extend haproxy_services with an optional grpc_port
field, and drop the now-unused cloud-init/loginctl linger wait from the
remote-exec inline steps.
Thomas Rijpstra