feat: publish CodexPi contest snapshot

deploy/fail2ban/filter.d/codexpi.conf

@@ -0,0 +1,4 @@
+[Definition]
+failregex = ^\{"timestamp":"[^"]+","event":"auth\.login_(?:failed|rate_limited)","source_ip":"<HOST>".*$
+ignoreregex =
+datepattern = ISO8601

deploy/fail2ban/jail.d/codexpi.local.example

@@ -0,0 +1,14 @@
+[codexpi]
+enabled = false
+filter = codexpi
+logpath = /home/config/CodexPi/data/security.log
+backend = auto
+port = https
+findtime = 10m
+maxretry = 8
+bantime = 30m
+
+# Activez uniquement après :
+#   sudo fail2ban-client -t
+#   sudo fail2ban-regex /home/config/CodexPi/data/security.log /etc/fail2ban/filter.d/codexpi.conf
+# L'application possède déjà son propre délai progressif et verrouillage de compte.