Tikpilot 1.55.0

Fixed

• Crash under "Too many open files". The syslog receiver kept
  half-open TCP connections forever: a site on a bad link disappears
  without FIN, and the socket stayed. With fifty sites reconnecting on
  every outage the process ran out of file descriptors within a day and
  everything stopped at once. Idle connections now close, keepalive is
  on, the number of connections is capped, and the service unit raises
  the limit.
• Upgrade broke an existing installation. A duplicate key in the
  migration list silently dropped the new session_epoch column, so
  every page answered with an error on an existing database. Fresh
  installs were fine, which is exactly why the tests missed it.
• Empty form fields answered with raw JSON from FastAPI instead of a
  hint in the form.
• ConnectionResetError: [Errno 104] is now explained: the router
  accepts the connection and closes it at once when the source address
  is not in the /ip service list.

Added

• Administrator password reset. Set a new password for another
  account without asking for the old one. Changing a password, yours or
  someone else's, now ends every existing session of that person.
• Report scope. The availability report can be limited to a group,
  to individual sites, or to an arbitrary date range. The scope is
  printed in the document and carried into the CSV export.
• The summary shows average downtime per site instead of the fleet
  total, so two reports can be compared.
• The whole .env reaches the container in Docker, not a dozen
  hand-listed variables.

Upgrading: pull and restart, the database migrates itself. Everyone will
be signed out once, that is the session change.

Full list of changes: CHANGELOG.md