v0.9.0 — One-click self-update (homegrown, no OTM)

Add an admin 'Pull & rebuild' button (Settings → Updates). It POSTs an
admin-gated route that signals a privileged 'updater' sidecar (adnanh/webhook +
docker socket) over the internal network with a shared secret; the sidecar runs
'git fetch && reset --hard origin/master && docker compose up -d --build app'
detached. The UI polls /api/version until the rebuilt app returns on the new
version, then reloads.

Secret matching uses webhook -template + getenv so UPDATER_SECRET stays out of
the repo (host .env only). No request data reaches the shell — the command is
fixed in updater/update.sh.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

.env.example

@@ -10,3 +10,9 @@ NEXTAUTH_URL="http://localhost:3000"
 GITEA_URL="http://192.168.0.5:3022"
 GITEA_TOKEN=""
 GITEA_REPO="bonna61/Moonbase"
+
+# Self-update — the admin "Pull & rebuild" button signals the updater sidecar.
+# UPDATER_SECRET is shared between the app and the updater (set in the host .env,
+# never committed). UPDATER_URL points at the sidecar on the internal network.
+UPDATER_URL="http://updater:9000/hooks/moonbase-update"
+UPDATER_SECRET=""