Remove compose ${VAR} overrides that blanked stack.env values and map KOPIA_REPOSITORY_PASSWORD in init-kopia; use hostname-only B2 endpoint.
Protects /config, selective labdata, and nightly DB dumps; documents homelab improvement plan briefs.