feat: Add authenticated service checks

Support FreshRSS login with challenge hashing, add GitHub token usage, and update service metadata for Immich and PeerTube.

services.yaml

@@ -21,20 +21,22 @@ services:
       value: $.tag_name
   - name: Immich
     base_url: https://photos.bundang.swierczyniec.info/
-    current_version_url:
+    current_version_url: https://photos.bundang.swierczyniec.info/api/server/version
     current_version_extract:
+      type: jsonpath_join
+      value: $.major, $.minor, $.patch
     upstream_latest_version_url: https://api.github.com/repos/immich-app/immich/releases/latest
     upstream_latest_extract:
       type: jsonpath
       value: $.tag_name
-    notes: Instance version endpoint returned 404 for /api/server-info/version.
+    notes: Version exposed as major/minor/patch fields.
   - name: PeerTube
     base_url: https://tube.jeena.net/
     current_version_url: https://tube.jeena.net/api/v1/config
     current_version_extract:
       type: jsonpath
       value: $.serverVersion
-    upstream_latest_version_url: https://api.github.com/repos/peertube/peertube/releases/latest
+    upstream_latest_version_url: https://api.github.com/repos/Chocobozzz/PeerTube/releases/latest
     upstream_latest_extract:
       type: jsonpath
       value: $.tag_name
@@ -96,10 +98,20 @@ services:
     notes: /version returns 401 without auth; uses Basic auth.
   - name: FreshRSS
     base_url: https://rss.jeena.net/
-    current_version_url:
+    current_version_url: https://rss.jeena.net/i/?a=about
     current_version_extract:
+      type: regex
+      value: FreshRSS version</dt>\s*<dd>([0-9.]+)</dd>
+    login:
+      url: https://rss.jeena.net/i/?c=auth&a=login
+      username_env: FRESHRSS_USERNAME
+      password_env: FRESHRSS_PASSWORD
+      username_field: username
+      password_field: password
+      crypto: true
+      nonce_url: https://rss.jeena.net/i/?c=javascript&a=nonce&user=
     upstream_latest_version_url: https://api.github.com/repos/FreshRSS/FreshRSS/releases/latest
     upstream_latest_extract:
       type: jsonpath
       value: $.tag_name
-    notes: No unauthenticated version endpoint found.
+    notes: Version scraped from About page after login.