feat: challenge registry-driven platform + XVI/XVII imports + admin toggle + domain rename

- Rename repo/domain: attack-defense-platform / attackdefense.imrnes.team (all refs replaced)
- challenge_registry.json: single source of truth (28 challs across gemastik18/xvi/xvii)
- teams.py: registry-driven CHALLENGES, set_challenge_enabled, sync_challenge_runtime
  (apply enable/disable to live teams: build/up or stop/remove + receiver restart)
- compose_gen.py: render per-team compose from canonical per-challenge templates
  (image reuse, per-team ports 30xxx, flag mounts, passwords)
- gen_canonical_composes.py: canonical docker-compose.yml for all services
- import_new_challenges.py: import XVI/XVII services + EOL base image fixes
  (debian:buster→bookworm, node:14→20, python:3.7-slim→3.11)
- receiver: xvi package (10 checkers) + xvii package (12 generic checkers),
  Challenge base reads PASSWORD_<team_port> from env; gen_receiver_main.py
  generates per-team main.py from registry
- main.py: /api/challenges returns full registry; PATCH /api/challenges/<name>
  toggles enabled + applies to live teams
- index.html: 🏗️ Challenge Manager tab (toggle per challenge, grouped by set)
- SLA bonus now dynamic (all enabled challenges, not hardcoded 6)

services/cdn/compose.template.yml

@@ -0,0 +1,21 @@
+services:
+  cdn:
+    container_name: cdn_container
+    hostname: cdn
+    restart: always
+    build:
+      context: cdn
+      args:
+        - PASSWORD=$PASSWORD_12000
+    volumes:
+      - ../receiver/flags/cdn.txt:/flag.txt:ro
+      - ../utils/bashrc:/root/.bashrc:ro
+      - ../utils/preexec.sh:/root/.preexec.sh:ro
+    ports:
+      - "12000:8000"
+      - "12022:22"
+    extra_hosts:
+      - "host.docker.internal:host-gateway"
+  # --- cdn ---
+
+  # --- phew ---

services/cdn/docker-compose.yml

@@ -1,15 +1,18 @@
-version: "3.8"
 services:
-  cdn_services:
+  cdn:
     container_name: cdn_container
     hostname: cdn
+    restart: always
     build:
       context: .
       args:
-          - PASSWORD=root
+        - PASSWORD=$PASSWORD_12000
+    volumes:
+      - ../receiver/flags/cdn.txt:/flag.txt:ro
+      - ../utils/bashrc:/root/.bashrc:ro
+      - ../utils/preexec.sh:/root/.preexec.sh:ro
     ports:
-      - "4500:8000"  # app
-      - "4522:22"    # ssh
-    environment:
-      SECRET_KEY: "c75f1259a4c95bb31563405d488d7bf9c0eaf4d562fd13557624f8e18eb5cfff"
-    restart: always
+      - "12000:8000"
+      - "12022:22"
+    extra_hosts:
+      - "host.docker.internal:host-gateway"