archwiki: show the main page's language button in the header

See merge request !660

Enable $wgVectorLanguageInMainPageHeader, so that the main page is consistent with other pages.
See https://www.mediawiki.org/wiki/Skin:Vector/2022#$wgVectorLanguageInMainPageHeader.

Compare: https://wiki.archlinux.org/?languageinmainpageheader=1 vs https://wiki.archlinux.org/?languageinmainpageheader=0

Discussed in https://wiki.archlinux.org/title/MediaWiki_talk:Common.css#Main_page_columns_and_Vector_2022_language_links.

- Add `ft=systemd` where needed
- Remove `ft=` where filetype detection works (especially jinja.vim)
- Set `sw=2 sts=-1 et` everywhere

Use the localpart for the default IRC nicknames instead of the display
name, which should make for more succinct nicks.

We have been using sponsored Equinix Metal boxes for years (sponsorship
managed by CNCF[1]). This adds a service account[2], so we don't need to
rely on individual access.

[1] https://github.com/cncf/cluster
[2] https://github.com/cncf/cluster/issues/213

Ref #485

aurweb: bump to v6.1.9

See merge request !661

Signed-off-by: Leonidas Spyropoulos <artafinde@archlinux.org>

Copy the latest dashboard from upstream, fixing the graphs.

Ref: rfcs!15

Similarly to geo.mirror.pkgbuild.com, this is monitored elsewhere.

Fix #475

No reason this should be 0600 as it doesn't contain any sensitive data;
switch it back to the package's default permissions of 0644.

syncrepo: let mirrorsync perform the repo syncing

See merge request !652

This role will still handle setting up nginx and rsyncd, due to specific
configuration requirements these services have.

We're also effectively relieving build.archlinux.org of rsyncd duties as
it is not something it should be doing anyway.

mailman: update mkinitcpio URL in arch-projects mailing list description

See merge request !654

mkinitcpio moved from GitHub to gitlab.archlinux.org.
See #474.

I think this was renamed when Keycloak switched to Quarkus.

keycloak: remove /auth from all Keycloak endpoints

See merge request !655

From [1]: "By default, the new Quarkus distribution removes /auth from
           the context-path."

[1] https://www.keycloak.org/migration/migrating-to-quarkus

matrix: Enable backchannel logouts from keycloak to synapse

See merge request !653

SQLAlchemy 1.4 no longer accepts engine URLs of the form postgres://.

https://docs.sqlalchemy.org/en/20/changelog/changelog_14.html#change-3687655465c25a39b968b4f5f6e9170b

CacheDir, as configured by common's pacman.conf task, already includes
the local package mirror when available (on mirrors, gemini and build).

This worked because riscv was the only nginx-enabled mirror.

Fixes: 43eb814b ("Combine sync{archive,debug,riscv} into mirrorsync")

sshd: adjust /etc/ssh and includes dir permissions

See merge request !651

There is no reason these should have such restrictive permissions, and
missing the execute bit appears to be a mistake. Let /etc/ssh keep the
mode from the package (0755). Use the same for the includes directory.

Update archmanweb to v1.5

See merge request !650