feat: challenge registry-driven platform + XVI/XVII imports + admin toggle + domain rename

- Rename repo/domain: attack-defense-platform / attackdefense.imrnes.team (all refs replaced)
- challenge_registry.json: single source of truth (28 challs across gemastik18/xvi/xvii)
- teams.py: registry-driven CHALLENGES, set_challenge_enabled, sync_challenge_runtime
  (apply enable/disable to live teams: build/up or stop/remove + receiver restart)
- compose_gen.py: render per-team compose from canonical per-challenge templates
  (image reuse, per-team ports 30xxx, flag mounts, passwords)
- gen_canonical_composes.py: canonical docker-compose.yml for all services
- import_new_challenges.py: import XVI/XVII services + EOL base image fixes
  (debian:buster→bookworm, node:14→20, python:3.7-slim→3.11)
- receiver: xvi package (10 checkers) + xvii package (12 generic checkers),
  Challenge base reads PASSWORD_<team_port> from env; gen_receiver_main.py
  generates per-team main.py from registry
- main.py: /api/challenges returns full registry; PATCH /api/challenges/<name>
  toggles enabled + applies to live teams
- index.html: 🏗️ Challenge Manager tab (toggle per challenge, grouped by set)
- SLA bonus now dynamic (all enabled challenges, not hardcoded 6)

services/s3/src/main.py

@@ -0,0 +1,40 @@
+#!/usr/bin/env python3
+from flask import Flask, request, redirect, render_template
+import os
+
+
+app = Flask(__name__)
+app.config["MAX_CONTENT_LENGTH"] = 1024
+
+
+@app.route("/upload", methods=["POST"])
+def aplot():
+    try:
+        file = request.files["file"]
+        filename = file.filename
+        path = os.path.join("uploads/", filename)
+        assert filename and ".." not in filename and "flag" not in filename
+        assert not os.path.exists(path)
+        file.save(os.path.join("uploads/", filename))
+        return f'Download <a href="/download?filename={filename}">here</a>'
+    except:
+        return ">:("
+
+
+@app.route("/download", methods=["GET"])
+def donlot():
+    try:
+        filename = request.args.get("filename")
+        assert filename and ".." not in filename
+        return open(os.path.join("uploads/", filename)).read()
+    except:
+        return ">:("
+
+
+@app.route("/", methods=["POST", "GET"])
+def index():
+    return render_template("index.html")
+
+
+if __name__ == "__main__":
+    app.run(host="0.0.0.0", port=80, debug=False)

services/s3/src/requirements.txt

@@ -0,0 +1 @@
+Flask

services/s3/src/start.sh

@@ -0,0 +1,5 @@
+#!/bin/bash
+
+/usr/sbin/sshd -D &
+chmod +x ./main.py
+./main.py

services/s3/src/templates/index.html

@@ -0,0 +1,15 @@
+<!DOCTYPE html>
+<html lang="en">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <title>Stupid Storage Service</title>
+</head>
+<body>
+  <form action="/upload" method="post" enctype="multipart/form-data">
+    <input type="file" name="file">
+    <input type="submit">
+  </form>
+  <a href=""></a>
+</body>
+</html>