Remove unnecessary port exports and add Traefik routing

Commit `068a03f`

Remove exposed ports for services accessible via Traefik proxy:
- grafana, prometheus, alertmanager, cadvisor, orchestrator, tempo API
- loki, alloy, suricata-exporter (internal services)
- rsync-master, zaproxy, karacho-blockchain, faraday
Add Traefik configuration for pentest services:
- zaproxy → zap.bojemoi.lab
- karacho-blockchain → karacho.bojemoi.lab
- nuclei-api → nuclei.bojemoi.lab
Keep essential ports: postgres (5432), postfix (25), protonmail-bridge (1025/1143), tempo OTLP (4317/4318/9411), node-exporter (9100 host mode)

Co-Authored-By: Claude Opus 4.5 noreply@anthropic.com