fix(maintainerr): correct data volume path and enable TLS bypass for Plex

- Mount /config/maintainerr to /opt/data (actual DB location, not /opt/maintainerr/data)
- Add NODE_TLS_REJECT_UNAUTHORIZED=0 so Node.js accepts Plex's self-signed cert
- Mark TB-007/008/009/012/013/016 tasks as done/dropped in improvement plan

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

plans/homelab-improvements/tasks/TB-007-romhacks-handoff.md

@@ -1,7 +1,7 @@
 # TB-007 — Romhacks → RomM handoff
 
-**Status:** not started  
-**Your call:** _(unset — talk first)_
+**Status:** done  
+**Your call:** Do it
 
 ---
 
@@ -33,9 +33,9 @@
 
 | | |
 |---|---|
-| **Decision** | |
-| **Notes** | |
-| **Date** | |
+| **Decision** | Already working — 200+ games routed; handoff runs every 6h automatically |
+| **Notes** | 3 games still downloading (Vanguard, Vanishing Point, Eternal X/Wilting Y) — auto-placed next cycle. 5 re-appeared incoming folders are harmless JD re-download remnants. |
+| **Date** | 2026-06-15 |
 
 ---