fix: cap NATS JetStream streams to prevent OOM crash

WIRELESS_REGISTRATIONS stream had a 256MB MaxBytes cap in a 256MB
container — guaranteed to crash under load. ALERT_EVENTS and
OPERATION_EVENTS had no byte limit at all.

- Reduce WIRELESS_REGISTRATIONS MaxBytes from 256MB to 128MB
- Add 16MB MaxBytes cap to ALERT_EVENTS and OPERATION_EVENTS
- Bump NATS container memory limit from 256MB to 384MB
- Add restart: unless-stopped to NATS in base compose
- Bump version to 9.8.2

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

docs/CONFIGURATION.md

@@ -9,7 +9,7 @@ TOD uses Pydantic Settings for configuration. All values can be set via environm
 | Variable | Default | Description |
 |----------|---------|-------------|
 | `APP_NAME` | `TOD - The Other Dude` | Application display name |
-| `APP_VERSION` | `9.8.1` | Semantic version string (see VERSION file at project root) |
+| `APP_VERSION` | `9.8.2` | Semantic version string (see VERSION file at project root) |
 | `TOD_VERSION` | `latest` | Docker image tag for pre-built images (set by setup.py) |
 | `ENVIRONMENT` | `dev` | Runtime environment: `dev`, `staging`, or `production` |
 | `DEBUG` | `false` | Enable debug mode |

docs/website/index.html

@@ -55,7 +55,7 @@
       "Zero-knowledge authentication (SRP-6a)"
     ],
     "softwareRequirements": "Docker, PostgreSQL 17, Redis, NATS",
-    "softwareVersion": "9.8.1",
+    "softwareVersion": "9.8.2",
     "license": "https://mariadb.com/bsl11/"
   }
   </script>
@@ -547,7 +547,7 @@
       <section class="wp-section">
         <h2>Status</h2>
         <table class="wp-status-table">
-          <tr><td>Version</td><td>9.8.1</td></tr>
+          <tr><td>Version</td><td>9.8.2</td></tr>
           <tr><td>License</td><td>BSL 1.1 (converts to Apache 2.0 in 2030)</td></tr>
           <tr><td>Free tier</td><td>250 devices</td></tr>
           <tr><td>Stability</td><td>Breaking changes expected before v11</td></tr>