feat(devicebackup): UrBackup for the Windows laptops, Time Machine staging for the Macs

New devicebackup stack: UrBackup 2.5.x (pinned, watchtower off) in internet
mode on :55415 so laptops back up on the LAN and over the tailnet; web UI
only via Caddy + Authentik forward_auth (provider homelab-urbackup, pk 41).

MacBooks (tm-hub, tm-wif) use Time Machine on the host smbd, which already
owns :445. Shares are staged in /etc/samba/smb.conf.timemachine-pending and
not yet applied; README has the apply command and client setup.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

bookmarks-domains.html

@@ -12,11 +12,6 @@
             <DT><A HREF="https://foundry2.ginnoir.com">foundry2</A>
         </DL><p>
 
-        <DT><H3>TABLETOP TOOLS (public)</H3>
-        <DL><p>
-            <DT><A HREF="https://5etools.ginnoir.com">5etools</A>
-        </DL><p>
-
         <DT><H3>FILE STORAGE — internal only (Nextcloud) (internal)</H3>
         <DL><p>
             <DT><A HREF="https://files.ginnoir.com">files</A>
@@ -24,6 +19,7 @@
 
         <DT><H3>STATIC SITES (public)</H3>
         <DL><p>
+            <DT><A HREF="https://5etools.ginnoir.com">5etools</A>
             <DT><A HREF="https://wa4.ginnoir.com">wa4</A>
         </DL><p>
 
@@ -95,6 +91,7 @@
             <DT><A HREF="https://webui.ginnoir.com">webui [internal]</A>
             <DT><A HREF="https://imgstudio.ginnoir.com">imgstudio [internal]</A>
             <DT><A HREF="https://backup.ginnoir.com">backup</A>
+            <DT><A HREF="https://urbackup.ginnoir.com">urbackup [internal]</A>
             <DT><A HREF="https://router.ginnoir.com">router [internal]</A>
         </DL><p>