Swap Photopea -> GIMP (lscr.io/linuxserver/gimp); remove broken photopea container/basic-auth on media tools

docs/websites.md

@@ -5,7 +5,7 @@
 
 ## Public — *.lab.audasmedia.com.au
 console.lab            # Family Home Lab portal (login)
-photo.lab / video.lab / audio.lab / lmms.lab   # media editor tools (basic-auth)
+video.lab / audio.lab / lmms.lab / gimp.lab   # media editor tools (no login)     (photopea removed 2026-08-26)
 dsh-sam.lab dsh-jo.lab dsh-harry.lab dsh-finn.lab   # DeepSeek chat (basic-auth)
 chat.lab               # family group chat
 pb.chat.lab            # chat admin (admin-only, basic-auth)
@@ -47,9 +47,9 @@ where-woof.com  admin.where-woof.com          # family location
 homeassistant.lab.quickweb.com.au            # HA mirror
 
 ## auth model
-- No-login tools behind Caddy basic-auth: photo/video/audio/lmms, dsh-*, omniroute,
-  photo-filter, dozzle, sams, pb.chat, ntfy, plus apps left on basic-auth (toora,
-  homebox, phpipam, watchyourlan, librenms, kopia, backrest, filebrowser, ...).
+- Media/chat browser tools (video/audio/lmms/gimp, dsh-*, omniroute, photo-filter) have NO login
+  (basic-auth removed 2026-08-26 so they load fully). Apps still behind basic-auth: toora, homebox,
+  phpipam, watchyourlan, librenms, kopia, backrest, filebrowser, dozzle, sams, pb.chat, ntfy.
 - Apps with own login (basic-auth REMOVED so their mobile apps/APIs work): homeassistant,
   nextcloud, immich, audiobookshelf, vikunja, proxmox(+backup), portainer, grafana,
   uptimekuma, supabase.