A new `all` entrypoint role runs FrankenPHP, the queue worker and the
scheduler together under supervisord, so a single-node install is two
containers (app + web) instead of four. The boot steps run once, then
supervisord launches the existing `worker` and `scheduler` roles, so their
commands stay defined in one place. The split roles are unchanged for
scaled-out setups.

docs/unraid.md explains running NextSearch on Unraid as two containers
against existing (or Community-Applications) Postgres, Redis, Meilisearch,
Tika, Gotenberg and S3. Bumps the version to 0.2.4 and folds 2FA plus this
into the 0.2.4 changelog.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>