feat: challenge registry-driven platform + XVI/XVII imports + admin toggle + domain rename

- Rename repo/domain: attack-defense-platform / attackdefense.imrnes.team (all refs replaced)
- challenge_registry.json: single source of truth (28 challs across gemastik18/xvi/xvii)
- teams.py: registry-driven CHALLENGES, set_challenge_enabled, sync_challenge_runtime
  (apply enable/disable to live teams: build/up or stop/remove + receiver restart)
- compose_gen.py: render per-team compose from canonical per-challenge templates
  (image reuse, per-team ports 30xxx, flag mounts, passwords)
- gen_canonical_composes.py: canonical docker-compose.yml for all services
- import_new_challenges.py: import XVI/XVII services + EOL base image fixes
  (debian:buster→bookworm, node:14→20, python:3.7-slim→3.11)
- receiver: xvi package (10 checkers) + xvii package (12 generic checkers),
  Challenge base reads PASSWORD_<team_port> from env; gen_receiver_main.py
  generates per-team main.py from registry
- main.py: /api/challenges returns full registry; PATCH /api/challenges/<name>
  toggles enabled + applies to live teams
- index.html: 🏗️ Challenge Manager tab (toggle per challenge, grouped by set)
- SLA bonus now dynamic (all enabled challenges, not hardcoded 6)

services/hirnfick/src/server.py

@@ -0,0 +1,35 @@
+import tempfile
+from base64 import b64encode
+from subprocess import check_output
+
+from fastapi import FastAPI
+from fastapi.responses import FileResponse
+from pydantic import BaseModel
+
+
+class Input(BaseModel):
+    code: bytes
+
+
+class Output(BaseModel):
+    output: bytes
+
+
+app = FastAPI()
+
+
+@app.get("/")
+def index():
+    return FileResponse("index.html")
+
+
+@app.post("/api/run")
+def run(input: Input):
+    code = input.code
+
+    with tempfile.NamedTemporaryFile() as fp:
+        fp.write(code)
+        fp.seek(0)
+        output = check_output(["./hirnfick", fp.name])
+
+    return Output(output=b64encode(output))