Add NasCab with latest and 3.6.1 versions using the official ypptec/nascab image, separate media/state mounts, and conservative HTTP-only default exposure.
Validated with adapter strict checks, env closure, docker compose config, and real 1Panel v2 fresh-install smoke for latest and 3.6.1 including restart, uninstall, and cleanup.
