feat: convert WordOps from Nginx to OpenLiteSpeed + LSPHP + LSCache

Complete conversion of the WordOps stack from Nginx + PHP-FPM to
OpenLiteSpeed + LSPHP + LSCache. This is a full rewrite across all 7
phases of the codebase:

- Foundation: OLS paths, variables, services, removed pynginxconfig dep
- Templates: 11 new OLS mustache templates, removed nginx-specific ones
- Stack: stack_pref, stack, stack_services, stack_upgrade, stack_migrate
- Site: site_functions, site, site_create, site_update
- Plugins: debug, info, log, clean rewritten for OLS
- SSL/ACME: acme.sh deploy uses lswsctrl, OLS vhssl blocks
- Other: secure, backup, clone, install script

Additional features:
- Debian 13 (trixie) support
- PHP 8.5 support
- WP Fort Knox mu-plugin integration (wo secure --lockdown/--unlock)
- --nginx CLI flag preserved for backward compatibility

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

wo/cli/templates/fail2ban.mustache

@@ -4,23 +4,17 @@ ignoreip = 127.0.0.1/8 ::1
 [recidive]
 enabled = true
 
-{{#nginx}}[nginx-http-auth]
-enabled   = true
-logpath = /var/log/nginx/*error*.log
-
-[nginx-botsearch]
-enabled   = true
-logpath = /var/log/nginx/*access*.log
-
-[wo-wordpress]
+{{#ols}}[wo-wordpress]
 enabled = true
 filter = wo-wordpress
 action = iptables-multiport[name="wo-wordpress", port="http,https"]
-logpath = /var/log/nginx/*access*.log
+logpath = /usr/local/lsws/logs/access.log
+         /usr/local/lsws/conf/vhosts/*/logs/ols.access_log
 maxretry = 5
 
-[nginx-forbidden]
+[ols-forbidden]
 enabled = true
 filter = nginx-forbidden
-action = iptables-multiport[name="nginx-forbidden", port="http,https"]
-logpath = /var/log/nginx/*error*.log{{/nginx}}
+action = iptables-multiport[name="ols-forbidden", port="http,https"]
+logpath = /usr/local/lsws/logs/error.log
+         /usr/local/lsws/conf/vhosts/*/logs/ols.error_log{{/ols}}