Add oikos.hubris.network -> Oikos Console on apps (105:8091)

Authentik-gated (matches paperless.hubris.network's pattern) since the
console handles real mutation actions (signal ack/resolve, approval
approve/deny) and doesn't implement its own network-level gating the
way mcp.hubris.network/secrets.hubris.network do.

See dtoro/Homelab-Docs oikos/console/ for the app itself.

Caddyfile

@@ -304,3 +304,13 @@ seanime.hubris.network {
 	}
 	reverse_proxy 192.168.8.248:43211
 }
+
+oikos.hubris.network {
+	tls {
+		dns ionos {env.IONOS_AUTH_API_TOKEN}
+	}
+	handle {
+		import authentik
+		reverse_proxy 192.168.8.205:8091
+	}
+}