cistech-tunnel: Auto-fetch server cert, add VPN password field

- entrypoint.sh: Auto-fetch pin-sha256 from VPN URL if not provided
- config.json: Remove OC_SERVERCERT (auto-fetched), add OC_PASSWORD
- docker-compose.json: Add OC_PASSWORD env var

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

apps/cistech-tunnel/config.json

@@ -22,21 +22,20 @@
             "type": "text",
             "env_variable": "OC_URL",
             "required": true,
-            "default": "https://vpn.example.com"
+            "default": "https://vpn.cistech.net/Employees"
         },
         {
-            "label": "Server Certificate",
-            "type": "text",
-            "env_variable": "OC_SERVERCERT",
-            "required": true,
-            "default": "pin-sha256:HyHob3LiVmIp8ch9AzHJ9jMYqI43tO5N13oWeBLiZ/0="
-        },
-        {
-            "label": "Username",
+            "label": "Username (email)",
             "type": "text",
             "env_variable": "OC_USER",
             "required": true
         },
+        {
+            "label": "VPN Password",
+            "type": "password",
+            "env_variable": "OC_PASSWORD",
+            "required": true
+        },
         {
             "label": "TOTP Secret",
             "type": "password",