Rebuild ansible on the project deploy template

- playbook.yml (hosts: monoco) + vars/default.yml, requirements.yml
- roles: network (shared docker network), greatbear (registry pull,
  bind mount /var/lib/greatbear/pb_data, .env upload, health wait),
  caddy (blockinfile snippet into the shared Caddyfile + docker exec reload)
- image honors PB_DATA_DIR and runs as root to match the bind-mount pattern
- frontend on www.greatbear.in (+apex) with /api/* and /_* proxied to
  PocketBase; admin.greatbear.in redirects to the admin UI

scripts/run-all.mjs

@@ -15,7 +15,9 @@ import { spawn, spawnSync } from 'node:child_process'
 
 const PORT = process.env.PORT ?? '3000'
 const PB_HTTP = process.env.PB_HTTP ?? '0.0.0.0:8090'
-const PB_DATA = process.env.PB_DATA ?? '/data'
+// PB_DATA_DIR is the canonical variable (set in the deploy .env); PB_DATA kept
+// as a legacy alias, /data as the image default.
+const PB_DATA = process.env.PB_DATA_DIR ?? process.env.PB_DATA ?? '/data'
 
 let stopping = false
 const children = []