Alloy was being OOM-killed in the 256MB default VM, leaving the Grafana
Fly.io dashboard without metrics. Doubling to 512MB gives sufficient
headroom for tailscaled + nginx + alloy.
Also fix TruffleHog pre-commit hook to only scan staged changes
(--since-commit HEAD) instead of full repo history, and sanitize an
example credential URL in the Reolink camera plan doc.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>