feat(_update): replace watchtower with custom nightly update script

Removes the watchtower container in favour of a host-side script that
runs daily at 2:00 AM via systemd timer.  Mirrors the _backup pattern:
auto-discovers stacks, pulls images, recreates changed containers,
prunes dangling images, and notifies via n8n → Telegram.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

coolify/compose.yml

@@ -54,7 +54,6 @@ services:
       - "traefik.http.routers.coolify-web-secure.priority=1"
       - "traefik.http.services.coolify.loadbalancer.server.port=8080"
       - "traefik.docker.network=${NETWORK_NAME}"
-      - "com.centurylinklabs.watchtower.enable=true"
     networks:
       - compose_network
   realtime:
@@ -91,7 +90,6 @@ services:
       - "traefik.http.routers.coolify-terminal-ws.priority=100"
       - "traefik.http.services.coolify-terminal.loadbalancer.server.port=6002"
       - "traefik.docker.network=${NETWORK_NAME}"
-      - "com.centurylinklabs.watchtower.enable=true"
     networks:
       - compose_network
   redis: