feat(streaming): jellyfin GPU CDI access and jellyplex token

Decode-only P100 access for trickplay. Gives jellyplex-watched its
Jellyfin API key (still DRYRUN=True until mapping verified).

stacks/streaming/docker-compose.yml

@@ -23,6 +23,8 @@ services:
     networks: [streaming, edge]
     env_file:
       - stack.env
+    devices:
+      - nvidia.com/gpu=0
     environment:
       - JELLYFIN_PublishedServerUrl=https://jellyfin.ginnoir.com
     volumes:

stacks/streaming/stack.env

@@ -22,7 +22,7 @@ JWT_SECRET=0dd9fcdb632277b76977dbada8226e547cc773e1deafc8d778d4038f8d59393b
 PLEX_URL=http://192.168.1.69:32400
 PLEX_TOKEN=hM9aycswHKSsUrxiHqwq
 JELLYFIN_BASEURL=http://jellyfin:8096
-JELLYFIN_TOKEN=
+JELLYFIN_TOKEN=a3d9ee827d5c42298cae087a2c31d3fa
 SYNC_FROM_PLEX_TO_JELLYFIN=True
 SYNC_FROM_JELLYFIN_TO_PLEX=True
 # Start in dry-run. Task 16 flips this to False after the mapping is verified.