feat: add Pinchflat service configuration with Traefik routing

nodes/waldorf/pinchflat/compose.yaml

@@ -0,0 +1,22 @@
+services:
+  pinchflat:
+    container_name: pinchflat
+    environment:
+      - TZ=America/New_York
+      - BASIC_AUTH_USERNAME=chester
+      - BASIC_AUTH_PASSWORD=Procmi*1
+    image: keglin/pinchflat:v2025.9.26
+    mem_limit: 2048m
+    # ports:
+    #   - 8945:8945
+    restart: unless-stopped
+    volumes:
+      - /mnt/appdata/pinchflat/config:/config
+      - /mnt/appdata/pinchflat/downloads:/downloads
+    labels:
+      - "traefik.enable=true"
+      - "traefik.http.routers.pinchflat.entrypoints=websecure"
+      - "traefik.http.routers.pinchflat.rule=Host(`pinchflat.castaldifamily.com`)"
+      - "traefik.http.routers.pinchflat.tls=true"
+      - "traefik.http.routers.pinchflat.tls.certresolver=cloudflare"
+      - "traefik.http.services.pinchflat.loadbalancer.server.port=8945"