merge muzick redis into shared infra stack, rotate secrets

AUDIT.md

@@ -19,7 +19,6 @@ Audit the muzick project at `/home/kami/apps/muzick/`, file Vikunja tasks for fi
 
 ### Tasks filed
 - See Homelab infra project. Key items:
-  - #108: systemd service references dead Python venv (NEEDS FIX)
   - #109: pin Docker images (NEEDS FIX — minio:latest etc)
   - #110: N+1 queries in generators (PERFORMANCE)
   - #111: image proxy SSRF guard (SECURITY)
@@ -35,5 +34,4 @@ Audit the muzick project at `/home/kami/apps/muzick/`, file Vikunja tasks for fi
 8. **No input validation** on many routes (admin, library — `as any` casts)
 
 ### Remaining autonomous work items
-- #108 — Fix systemd service file (references dead Python venv) — CAN DO
 - #109 — Pin Docker images in docker-compose.yml — CAN DO