feat(volume-backups): add service backup UI and polish layouts

Add dedicated service volume-backup Livewire pages and routes, wire
shared storage backups for services, and pass S3 trusted hosts into
MinIO resolve options. Also refine breadcrumbs, sticky sidebars,
destination/GitHub layouts, resource filters, and login recovery link.

app/Models/S3Storage.php

@@ -172,7 +172,7 @@ class S3Storage extends BaseModel
                     'bucket' => $this['bucket'],
                 ],
                 [
-                    'endpoint' => ['required', new SafeWebhookUrl],
+                    'endpoint' => ['required', new SafeWebhookUrl(trustedInternalHosts: $this->trustedInternalHosts())],
                     'bucket' => ['required', new ValidS3BucketName],
                 ],
             );
@@ -192,7 +192,7 @@ class S3Storage extends BaseModel
                 'bucket' => $this['bucket'],
                 'endpoint' => $this['endpoint'],
                 'use_path_style_endpoint' => true,
-                'http' => array_merge(SafeWebhookUrl::httpClientOptions($this['endpoint']), [
+                'http' => array_merge(SafeWebhookUrl::httpClientOptions($this['endpoint'], $this->trustedInternalHosts()), [
                     'connect_timeout' => self::CONNECTION_TIMEOUT_SECONDS,
                     'timeout' => self::REQUEST_TIMEOUT_SECONDS,
                 ]),
@@ -235,6 +235,18 @@ class S3Storage extends BaseModel
         }
     }
 
+    /**
+     * The bundled MinIO container is a trusted internal S3 target, not a user-supplied webhook destination.
+     *
+     * @return array<int, string>
+     */
+    public function trustedInternalHosts(): array
+    {
+        return $this->uuid === 'minio' && parse_url($this->endpoint, PHP_URL_HOST) === 'coolify-minio'
+            ? ['coolify-minio']
+            : [];
+    }
+
     private function toUserFriendlyConnectionException(\Throwable $exception): \Throwable
     {
         $message = str($exception->getMessage())->lower();