fix: meet external-api route, drive media proxy, alertbot, misc tweaks

- Meet: add external-api backend path, CSRF trusted origins
- Drive: fix media proxy regex for preview URLs and S3 key signing
- OpenBao: enable Prometheus telemetry
- Postgres alerts: fix metric name (cnpg_backends_total)
- Gitea: bump memory limits for mirror workloads
- Alertbot: expanded deployment config
- Kratos: add find/cal/projects to allowed return URLs, settings path
- Pingora: meet external-api route fix
- Sol: config update

base/matrix/sol-config.yaml

@@ -61,6 +61,9 @@ data:
     research_max_agents = 25
     research_max_depth = 4
 
+    [grpc]
+    listen_addr = "0.0.0.0:50051"
+
     [vault]
     url = "http://openbao.data.svc.cluster.local:8200"
     role = "sol-agent"