Sync Gitea and Authentik configs with production

- Gitea: Add port 3001:3000 for external access
- Gitea: Add GITEA_RUNNER_LABELS=ubuntu-prod:host for runner
- Authentik: Add port 9000:9000 for external access

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

stacks/authentik/docker-compose.yml

@@ -3,6 +3,8 @@ services:
     image: ghcr.io/goauthentik/server:latest
     container_name: authentik-server
     restart: unless-stopped
+    ports:
+      - "9000:9000"
     command: server
     environment:
       AUTHENTIK_SECRET_KEY: ${AUTHENTIK_SECRET_KEY}

stacks/gitea/docker-compose.yml

@@ -10,6 +10,7 @@ services:
       - "22"
     ports:
       - "2245:22"
+      - "3001:3000"
     depends_on:
       - db
     environment:
@@ -52,6 +53,7 @@ services:
     environment:
       - GITEA_INSTANCE_URL=https://gitea.${DOMAIN}
       - GITEA_RUNNER_REGISTRATION_TOKEN=${GITEA_RUNNER_TOKEN}
+      - GITEA_RUNNER_LABELS=ubuntu-prod:host
 
 networks:
   web: