fix: meet external-api route, drive media proxy, alertbot, misc tweaks

- Meet: add external-api backend path, CSRF trusted origins
- Drive: fix media proxy regex for preview URLs and S3 key signing
- OpenBao: enable Prometheus telemetry
- Postgres alerts: fix metric name (cnpg_backends_total)
- Gitea: bump memory limits for mirror workloads
- Alertbot: expanded deployment config
- Kratos: add find/cal/projects to allowed return URLs, settings path
- Pingora: meet external-api route fix
- Sol: config update

base/data/openbao-values.yaml

@@ -31,6 +31,10 @@ server:
       storage "file" {
         path = "/openbao/data"
       }
+      telemetry {
+        prometheus_retention_time = "30s"
+        disable_hostname = true
+      }
 
   dataStorage:
     enabled: true