fix: meet external-api route, drive media proxy, alertbot, misc tweaks

- Meet: add external-api backend path, CSRF trusted origins
- Drive: fix media proxy regex for preview URLs and S3 key signing
- OpenBao: enable Prometheus telemetry
- Postgres alerts: fix metric name (cnpg_backends_total)
- Gitea: bump memory limits for mirror workloads
- Alertbot: expanded deployment config
- Kratos: add find/cal/projects to allowed return URLs, settings path
- Pingora: meet external-api route fix
- Sol: config update

base/data/openbao-values.yaml

@@ -31,6 +31,10 @@ server:
       storage "file" {
         path = "/openbao/data"
       }
+      telemetry {
+        prometheus_retention_time = "30s"
+        disable_hostname = true
+      }
 
   dataStorage:
     enabled: true

base/data/postgres-alertrules.yaml

@@ -28,7 +28,7 @@ spec:
             description: "Database {{ $labels.datname }} is {{ $value | humanize1024 }} (PVC limit 10Gi)"
 
         - alert: PostgresHighConnections
-          expr: sum by (pod) (cnpg_pg_stat_activity_count) > 80
+          expr: sum by (pod) (cnpg_backends_total) > 80
           for: 5m
           labels:
             severity: warning