Portfolio sync runs on the Cleura server (systemd timer every 20 min) instead of n8n -> Nurem

deploy/cleura/portfolio-sync.sh: same steps as /opt/immich-sync/run-sync.sh on Nurem (fetch main, portfolio-sync.mjs,
commit + push when photos changed) and then build-live.sh main on Cleura; flock against overlapping runs, the sync
runs in the pinned Node container. install-portfolio-sync.sh puts it in place; secrets stay in
/etc/portal/portfolio-sync.env (root 600). The snippet comment no longer mentions the removed /download/original.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

deploy/cleura/portfolio-sync.timer

@@ -0,0 +1,10 @@
+[Unit]
+Description=Portfolio sync every 20 minutes (Immich has no event when a photo is tagged, so it polls)
+
+[Timer]
+OnCalendar=*:0/20
+RandomizedDelaySec=60
+Persistent=true
+
+[Install]
+WantedBy=timers.target