feat: challenge registry-driven platform + XVI/XVII imports + admin toggle + domain rename

- Rename repo/domain: attack-defense-platform / attackdefense.imrnes.team (all refs replaced)
- challenge_registry.json: single source of truth (28 challs across gemastik18/xvi/xvii)
- teams.py: registry-driven CHALLENGES, set_challenge_enabled, sync_challenge_runtime
  (apply enable/disable to live teams: build/up or stop/remove + receiver restart)
- compose_gen.py: render per-team compose from canonical per-challenge templates
  (image reuse, per-team ports 30xxx, flag mounts, passwords)
- gen_canonical_composes.py: canonical docker-compose.yml for all services
- import_new_challenges.py: import XVI/XVII services + EOL base image fixes
  (debian:buster→bookworm, node:14→20, python:3.7-slim→3.11)
- receiver: xvi package (10 checkers) + xvii package (12 generic checkers),
  Challenge base reads PASSWORD_<team_port> from env; gen_receiver_main.py
  generates per-team main.py from registry
- main.py: /api/challenges returns full registry; PATCH /api/challenges/<name>
  toggles enabled + applies to live teams
- index.html: 🏗️ Challenge Manager tab (toggle per challenge, grouped by set)
- SLA bonus now dynamic (all enabled challenges, not hardcoded 6)

services/go-green/Dockerfile

@@ -0,0 +1,32 @@
+FROM golang:1.22-bookworm
+
+ARG PASSWORD
+
+ENV DEBIAN_FRONTEND noninteractive
+
+RUN echo root:${PASSWORD} | chpasswd
+COPY apt-insecure.conf /etc/apt/apt.conf.d/99gemastik-insecure
+RUN apt-get -o Acquire::AllowInsecureRepositories=true update && apt-get install -y openssh-server xinetd curl
+RUN echo "PasswordAuthentication yes" >> /etc/ssh/sshd_config
+RUN echo "PermitRootLogin yes" >> /etc/ssh/sshd_config
+RUN service ssh start
+
+RUN useradd -m ctf
+
+WORKDIR /ctf
+
+RUN echo "Connection blocked" > /etc/banner_fail
+COPY ctf.xinetd /etc/xinetd.d/ctf
+COPY ./src/main.go ./
+COPY ./run.sh ./
+COPY ./start.sh ./
+
+RUN go build main.go
+
+RUN touch /flag.txt
+RUN chmod -R 755 /ctf
+RUN chmod +x /ctf/start.sh
+
+CMD ./start.sh
+
+EXPOSE 8000

services/go-green/apt-insecure.conf

@@ -0,0 +1,3 @@
+Acquire::AllowInsecureRepositories "true";
+Acquire::AllowDowngradeToInsecureRepositories "true";
+Apt::Get::AllowUnauthenticated "true";

services/go-green/ctf.xinetd

@@ -0,0 +1,16 @@
+service ctf
+{
+    disable = no
+    socket_type = stream
+    protocol    = tcp
+    wait        = no
+    user        = root
+    type        = UNLISTED
+    port        = 8000
+    bind        = 0.0.0.0
+    server      = /bin/sh
+    server_args = /ctf/run.sh
+    banner_fail = /etc/banner_fail
+    # safety options
+    rlimit_cpu  = 1 # the maximum number of CPU seconds that the service may use
+}

services/go-green/docker-compose.yml

@@ -0,0 +1,18 @@
+services:
+  go-green:
+    container_name: go-green_container
+    hostname: go-green
+    restart: always
+    build:
+      context: .
+      args:
+        - PASSWORD=$PASSWORD_20000
+    volumes:
+      - ../receiver/flags/go-green.txt:/flag.txt:ro
+      - ../utils/bashrc:/root/.bashrc:ro
+      - ../utils/preexec.sh:/root/.preexec.sh:ro
+    ports:
+      - "20000:8000"
+      - "20022:22"
+    extra_hosts:
+      - "host.docker.internal:host-gateway"

services/go-green/run.sh

@@ -0,0 +1 @@
+su ctf -c "timeout 60s /ctf/main"

services/go-green/src/main.go

@@ -0,0 +1,66 @@
+package main
+
+import (
+	"fmt"
+	"os"
+)
+
+func main() {
+	data, err := os.ReadFile("/flag.txt")
+	if err != nil {
+		fmt.Println("Error reading flag:", err)
+		return
+	}
+	flag := string(data)
+	money := 420
+	choice := 0
+
+	fmt.Println("go-green @ gemastik-xvii")
+
+	fmt.Printf("you have $%d money\n", money)
+	fmt.Println("1. donate")
+	fmt.Println("2. admin")
+
+	for {
+		fmt.Print("choice? ")
+		fmt.Scanln(&choice)
+
+		switch choice {
+		
+		case 1:
+			var donate int
+			fmt.Print("how much money? ")
+			fmt.Scanln(&donate)
+
+			if donate > money {
+				fmt.Println("not enough money")
+				return
+			}
+
+			if donate >= 1337 {
+				fmt.Println("you are a generous person")
+				fmt.Println(flag)
+			}
+
+			money -= donate
+			fmt.Println("thanks for your contribution to a more sustainable future")
+			fmt.Printf("you have $%d money left\n", money)
+		
+		case 2:
+			var password string
+			fmt.Print("password? ")
+			fmt.Scanln(&password)
+
+			if password == flag {
+				money += 1337
+				fmt.Println("welcome admin")
+			} else {
+				fmt.Println("invalid password")
+			}
+		
+		default:
+			fmt.Println("invalid choice")
+			return
+		}
+	}
+}

services/go-green/start.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+/usr/sbin/sshd -D &
+/usr/sbin/xinetd -dontfork