feat(services): config schemas for the rest of the registry + textarea base64 transport

- Declarative config_schema on RDP, Telnet, MySQL, Redis, SMTP, SMTP_Relay
  matching the keys each service already reads at compose time.
- TODO marker on the 19 services that accept service_cfg but never read it,
  so future contributors know where to plug schemas in.
- Wizard base64-wraps all textarea values at INI emit (DeckyFleet
  buildIni); validate_cfg detects the b64: sentinel and decodes back to
  UTF-8. Plain raw strings still pass through for direct API submitters.
- HTTPS image entrypoint accepts PEM content or path in TLS_CERT/TLS_KEY:
  detects a BEGIN header, writes content to /opt/tls/, and re-exports
  the on-disk path so server.py keeps reading paths.
- Tests cover schema/compose alignment for each new service plus
  textarea base64 round-trip (incl. UTF-8) and HTTPS PEM end-to-end.

decnet/services/redis.py

@@ -1,5 +1,5 @@
 from pathlib import Path
-from decnet.services.base import BaseService
+from decnet.services.base import BaseService, ServiceConfigField
 
 TEMPLATES_DIR = Path(__file__).parent.parent / "templates" / "redis"
 
@@ -9,6 +9,23 @@ class RedisService(BaseService):
     ports = [6379]
     default_image = "build"
 
+    config_schema = [
+        ServiceConfigField(
+            key="version",
+            label="Advertised Redis version",
+            type="string",
+            placeholder="7.2.4",
+            help="Reported by INFO server -> redis_version.",
+        ),
+        ServiceConfigField(
+            key="os_string",
+            label="Advertised OS string",
+            type="string",
+            placeholder="Linux 5.15.0 x86_64",
+            help="Reported by INFO server -> os.",
+        ),
+    ]
+
     def compose_fragment(
         self,
         decky_name: str,