Add TLS proxy article, expand blog content, harden Grafana config

- Add new post/article: How a Small TLS Proxy Saved a Mobile Security
  Launch From a One-Year Delay, with matching OG/meta share page
- Mark tls-proxy-legacy-rescue article as visible and expand lessons
  learned section
- Add homelab and entertainment posts (Optiplex, survival sandboxes)
  to articles.js
- Harden Grafana: memory limits, rotated admin password, secure
  cookies, brute-force protection

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

docker-compose.yml

@@ -162,11 +162,15 @@ services:
     image: grafana/grafana:latest
     container_name: grafana
     restart: unless-stopped
+    mem_limit: 512m
+    mem_reservation: 256m
     environment:
       - GF_SECURITY_ADMIN_USER=carlos
-      - GF_SECURITY_ADMIN_PASSWORD=L1b3rty@1
+      - GF_SECURITY_ADMIN_PASSWORD=c233357b0cb8dbdd49e21ab032146e09
       - GF_USERS_ALLOW_SIGN_UP=false
+      - GF_SECURITY_DISABLE_BRUTE_FORCE_LOGIN_PROTECTION=false
       - GF_SERVER_ROOT_URL=https://metrics.carloselugo.com
+      - GF_SECURITY_COOKIE_SECURE=true
     volumes:
       - grafana_data:/var/lib/grafana
     networks: