fix(maintainerr): correct data volume path and enable TLS bypass for Plex

- Mount /config/maintainerr to /opt/data (actual DB location, not /opt/maintainerr/data)
- Add NODE_TLS_REJECT_UNAUTHORIZED=0 so Node.js accepts Plex's self-signed cert
- Mark TB-007/008/009/012/013/016 tasks as done/dropped in improvement plan

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

plans/homelab-improvements/tasks/TB-012-maintainerr.md

@@ -1,7 +1,7 @@
 # TB-012 — Maintainerr
 
-**Status:** not started  
-**Your call:** _(unset — talk first)_
+**Status:** done  
+**Your call:** Do it
 
 ---
 
@@ -32,9 +32,9 @@
 
 | | |
 |---|---|
-| **Decision** | |
-| **Notes** | |
-| **Date** | |
+| **Decision** | Done — added to media stack at maintainerr.ginnoir.com (internal/Authentik) |
+| **Notes** | Rule: request age >90d + not available in Plex + release date in past → delete from Overseerr only. Connect Overseerr/Sonarr/Radarr APIs in UI first. |
+| **Date** | 2026-06-15 |
 
 ---