release: 2.11.0: health-setup-checks - name, greeting, proxy on Health

Cut without asking, as the owner said on 2026-10-15. Server › Health checks
the certificate's name against the hostname, shows Postfix's greeting and
where the panel sees the viewer from (the commit before this; mockups
b2dcefc, cc33890, 0feaa55). go vet, go test (26 packages) and make e2e
passed on the test server for that tree. No migration, schema 12.

CHANGELOG [2.11.0]; pins in deploy/docker-compose.yml, README and the guide
(pin, build, the sample restore message); development's "from pin" and
row 37; roadmap row. No tag.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

docs/development.md

@@ -107,7 +107,7 @@ than the default «meaningful step» rule in [§ Commits and release build](#com
 2. Git tag `vX.Y.Z` and publish the GitHub Release only on explicit request (see
    [§ Release image](#release-image)).
 
-**Planned version cuts** (from pin `2.10.4`; adjust if semver changes mid-track):
+**Planned version cuts** (from pin `2.11.0`; adjust if semver changes mid-track):
 
 | Stage | ID | Cut |
 |---|---|---|
@@ -147,6 +147,7 @@ than the default «meaningful step» rule in [§ Commits and release build](#com
 | 34 | phone-desktop-mode | `2.10.2` (PATCH) |
 | 35 | backup-reauth | `2.10.3` (PATCH) |
 | 36 | origin-strict | `2.10.4` (PATCH) |
+| 37 | health-setup-checks | `2.11.0` |
 
 Docs-only prep (checklists in plans, no product code) uses the same per-step
 commit rule but **no** version cut until the next product stage ships.