fix(maintainerr): correct data volume path and enable TLS bypass for Plex

- Mount /config/maintainerr to /opt/data (actual DB location, not /opt/maintainerr/data)
- Add NODE_TLS_REJECT_UNAUTHORIZED=0 so Node.js accepts Plex's self-signed cert
- Mark TB-007/008/009/012/013/016 tasks as done/dropped in improvement plan

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

plans/homelab-improvements/tasks/TB-009-bookstack-decision.md

@@ -1,7 +1,7 @@
 # TB-009 — BookStack vs Obsidian
 
-**Status:** not started  
-**Your call:** _(unset — talk first)_
+**Status:** dropped  
+**Your call:** Drop
 
 ---
 
@@ -33,9 +33,9 @@
 
 | | |
 |---|---|
-| **Decision** | |
-| **Notes** | |
-| **Date** | |
+| **Decision** | Keep BookStack — in active use as Idlegame wiki and documentation |
+| **Notes** | No action needed; not a duplicate with Obsidian since it serves a different audience/purpose |
+| **Date** | 2026-06-15 |
 
 ---