Add sudo rules for reudy to allow NOPASSWD systemctl reload for caddy and update panelctl.sh to use docker.io for image reference

Co-authored-by: Copilot <copilot@github.com>

panelctl.sh

@@ -171,7 +171,7 @@ write_default_compose() {
   cat >"${stack_dir}/compose.yaml" <<EOF
 services:
   app:
-    image: traefik/whoami:latest
+    image: docker.io/traefik/whoami:latest
     restart: unless-stopped
     ports:
       - "127.0.0.1:${port}:80"