feat(packaging) : package YunoHost veille-ia_ynh (packaging v2, helpers 2.1)

- manifest.toml validé contre le schéma officiel manifest.v2.schema.json
  (sources par tag forge avec placeholder sha256 assumé, nodejs 24, ports,
  system_user, install_dir, data_dir, permission privée all_users, SSO)
- Scripts install/remove/upgrade/backup/restore/change_url (bash -n OK) :
  build au fil de l'eau avec BASE_PATH, ALERTS_TOKEN généré à l'install,
  .env chmod 400, logs journald
- conf/nginx.conf : proxy_params_with_auth (header Ynh-User), conf/systemd.service :
  node via __NODEJS_DIR__, sandboxing modéré, conf/env : DATA_DIR/OLLAMA_URL/ALERTS_TOKEN
- tests.toml minimal, doc DESCRIPTION/ADMIN fr+en
- README racine : dev local, variables d'env, procédure de release, Ollama

veille-ia_ynh/manifest.toml

@@ -0,0 +1,69 @@
+#:schema https://raw.githubusercontent.com/YunoHost/apps/main/schemas/manifest.v2.schema.json
+
+packaging_format = 2
+
+id = "veille-ia"
+name = "Veille IA"
+description.en = "Personal watchtower for generative AI models (releases, licenses, rankings)"
+description.fr = "Observatoire personnel de veille sur les modèles IA génératifs (sorties, licences, classements)"
+
+version = "0.1.0~ynh1"
+
+maintainers = ["cyber-mawonaj"]
+
+[upstream]
+license = "AGPL-3.0-or-later"
+code = "https://labola.o-k-i.net/cyber-mawonaj/veille-ia"
+
+[integration]
+yunohost = ">= 12.1"
+helpers_version = "2.1"
+architectures = "all"
+multi_instance = false
+ldap = false
+sso = true
+disk = "300M"
+ram.build = "1G"
+ram.runtime = "150M"
+
+[install]
+    [install.domain]
+    type = "domain"
+
+    [install.path]
+    type = "path"
+    default = "/veille"
+
+    [install.init_main_permission]
+    # App privée : "all_users" = SSO requis (remplace l'ancienne question is_public).
+    type = "group"
+    default = "all_users"
+
+    [install.ollama_url]
+    ask.fr = "URL de l'endpoint Ollama (optionnel — l'app fonctionne sans, en mode dégradé)"
+    ask.en = "Ollama endpoint URL (optional — the app works without it, in degraded mode)"
+    type = "string"
+    default = "http://127.0.0.1:11434"
+    optional = true
+
+[resources]
+    # Archive de l'app, publiée par tag sur la forge (procédure de release : README racine).
+    # ⚠️ sha256 à recalculer après chaque tag : sha256sum vX.Y.Z.tar.gz
+    [resources.sources.main]
+    url = "https://labola.o-k-i.net/cyber-mawonaj/veille-ia/archive/v0.1.0.tar.gz"
+    sha256 = "TODO_SHA256_A_CALCULER_APRES_LE_TAG_v0.1.0"
+    autoupdate.strategy = "latest_forgejo_tag"
+
+    [resources.system_user]
+
+    [resources.install_dir]
+
+    [resources.data_dir]
+
+    [resources.permissions]
+    main.url = "/"
+
+    [resources.ports]
+
+    [resources.nodejs]
+    version = "24"