feat: challenge registry-driven platform + XVI/XVII imports + admin toggle + domain rename

- Rename repo/domain: attack-defense-platform / attackdefense.imrnes.team (all refs replaced)
- challenge_registry.json: single source of truth (28 challs across gemastik18/xvi/xvii)
- teams.py: registry-driven CHALLENGES, set_challenge_enabled, sync_challenge_runtime
  (apply enable/disable to live teams: build/up or stop/remove + receiver restart)
- compose_gen.py: render per-team compose from canonical per-challenge templates
  (image reuse, per-team ports 30xxx, flag mounts, passwords)
- gen_canonical_composes.py: canonical docker-compose.yml for all services
- import_new_challenges.py: import XVI/XVII services + EOL base image fixes
  (debian:buster→bookworm, node:14→20, python:3.7-slim→3.11)
- receiver: xvi package (10 checkers) + xvii package (12 generic checkers),
  Challenge base reads PASSWORD_<team_port> from env; gen_receiver_main.py
  generates per-team main.py from registry
- main.py: /api/challenges returns full registry; PATCH /api/challenges/<name>
  toggles enabled + applies to live teams
- index.html: 🏗️ Challenge Manager tab (toggle per challenge, grouped by set)
- SLA bonus now dynamic (all enabled challenges, not hardcoded 6)

panel/gen_receiver_services.py

@@ -25,6 +25,11 @@ def write_unit(idx: int, st: dict):
             continue
         env[f"CHALLENGE_PORT_{ch.upper()}"] = str(st["ports"][ch]["chall"])
         env[f"CHALLENGE_CONTAINER_{ch.upper()}"] = f"{ch}_container_team{idx}"
+        # SSH passwords: checker Challenge.credentials() reads PASSWORD_<self.port>
+        # where self.port is the team challenge port.
+        pwd = st.get("chall_passwords", {}).get(ch)
+        if pwd:
+            env[f"PASSWORD_{st['ports'][ch]['chall']}"] = pwd
     env["COMPOSE_LOCATION"] = str(TEAMS_DIR / f"team{idx}" / "services" / "docker-compose.yml")
     env_lines = "\n".join(f'Environment="{k}={v}"' for k, v in env.items())
     unit = f"""[Unit]
@@ -48,6 +53,12 @@ WantedBy=multi-user.target
 
 def main():
     action = sys.argv[1] if len(sys.argv) > 1 else "start"
+    # Regenerate receiver main.py for existing teams from the registry
+    try:
+        from gen_receiver_main import sync_team_receivers
+        sync_team_receivers()
+    except Exception as e:
+        print(f"WARN: receiver main.py regen failed: {e}")
     for d in sorted(TEAMS_DIR.glob("team*")):
         sf = d / "state.json"
         if not sf.exists():