Add Jellyseerr to media stack

[ExtraToast]

This pull request adds Jellyseerr—a request management service for Jellyfin—to the home media stack. The changes include infrastructure updates, deployment scripts, firewall rules, DNS rewrites, and documentation to support Jellyseerr alongside existing media services.

Jellyseerr Integration

• Added a new Nomad job file jellyseerr.nomad.hcl for deploying Jellyseerr, including configuration for service discovery, Traefik routing, and resource allocation.
• Updated deployment scripts (deploy.sh) to include Jellyseerr in the media phase: job submission, readiness checks, and documentation. [1] [2] [3] [4] [5]
• Created a host volume for Jellyseerr configuration in nomad-client.hcl and ensured directory creation and permissions in setup.sh. [1] [2]

Networking and Access

• Updated firewall rules to allow LAN access to Jellyseerr's port (5055) and clarified access patterns for media apps and admin tools. [1] [2]
• Added DNS rewrite for jellyseerr.jorisjonkers.dev to point to the home LAN IP in AdGuard configuration.

Documentation Updates

• Revised README.md to document Jellyseerr setup, update architecture diagrams, add service URLs, and clarify access/authentication details for Jellyseerr and related services. [1] [2] [3] [4] [5] [6] [7] [8]

These changes ensure Jellyseerr is fully integrated into the home media infrastructure, with proper deployment, configuration, network access, and user documentation.