[ci skip] fix widget issues: ports, Immich v2 API, Nextcloud trusted domains

- qBittorrent: use service port 80 (not container port 8080)
- Immich: add version=2 for new API endpoints (/api/server/*)
- Nextcloud: use external URL (internal rejects untrusted Host header)
- HA London: remove widget (token expired, needs manual regeneration)
- Headscale: remove widget (requires nodeId param, not overview)

stacks/servarr/qbittorrent/main.tf

@@ -167,7 +167,7 @@ module "ingress" {
     "gethomepage.dev/group"            = "Media & Entertainment"
     "gethomepage.dev/pod-selector"     = ""
     "gethomepage.dev/widget.type"      = "qbittorrent"
-    "gethomepage.dev/widget.url"       = "http://qbittorrent.servarr.svc.cluster.local:8080"
+    "gethomepage.dev/widget.url"       = "http://qbittorrent.servarr.svc.cluster.local"
     "gethomepage.dev/widget.username"  = var.homepage_credentials["qbittorrent"]["username"]
     "gethomepage.dev/widget.password"  = var.homepage_credentials["qbittorrent"]["password"]
   }