Add map-frontend (nginx + MapLibre GL), make pmtiles internal-only

- map-frontend: nginx serves MapLibre GL static app, proxies /tiles/ to pmtiles internally
- pmtiles: remove host port binding (internal to npm-network only), update public-url
- 5 themes: light, dark, grayscale, white, black

pmtiles/docker-compose.yaml

@@ -3,9 +3,7 @@ services:
     image: protomaps/go-pmtiles:latest
     container_name: pmtiles
     restart: unless-stopped
-    command: serve /data --port=8080 --cors=* --public-url=https://maps.kolpacksoftware.com/
-    ports:
-      - "8086:8080"
+    command: serve /data --port=8080 --cors=* --public-url=https://maps.kolpacksoftware.com/tiles/
     volumes:
       - /mnt/nas_library/pmtiles/data:/data
     networks: