chore: upgrade synapse to v1.158.0 + mas 1.22.0

signalbridge: v0.8.7 -> v0.2606.0 (calver scheme change, already Go-based)
telegrambridge: v0.15.3 -> v0.2606.0 (Python->Go bridgev2 rewrite; config template rewritten)
signaldb/telegramdb/discorddb: postgres 13-alpine -> 14-alpine (PG13 EOL; conservative one-major bump)
.env.sample: TELEGRAM_BRIDGE_PERMISSIONS relaybot -> relay (Go bridgev2 permission rename)

compose.discord.yml

@@ -30,7 +30,7 @@ services:
       - internal
 
   discorddb:
-    image: postgres:16-alpine
+    image: postgres:13-alpine
     secrets:
       - discord_db_password
     environment:

compose.mas.yml

@@ -5,7 +5,7 @@ version: "3.8"
 
 services:
   mas:
-    image: ghcr.io/element-hq/matrix-authentication-service:1.24.0
+    image: ghcr.io/element-hq/matrix-authentication-service:1.22.0
     command: ["server", "--config=/etc/mas/config.yaml"]
     environment:
       - DOMAIN

compose.signal.yml

@@ -35,7 +35,7 @@ services:
       - internal
 
   signaldb:
-    image: postgres:16-alpine
+    image: postgres:13-alpine
     secrets:
       - signal_db_password
     environment:

compose.telegram.yml

@@ -10,7 +10,7 @@ services:
       - telegram-data:/telegram-data
 
   telegrambridge:
-    image: dock.mau.dev/mautrix/telegram:v0.2608.0
+    image: dock.mau.dev/mautrix/telegram:v0.2607.0
     depends_on:
       - telegramdb
     configs:
@@ -40,7 +40,7 @@ services:
       - internal
 
   telegramdb:
-    image: postgres:16-alpine
+    image: postgres:13-alpine
     secrets:
       - telegram_db_password
     environment:

compose.yml

@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   web:
-    image: nginx:1.31.5
+    image: nginx:1.31.3
     networks:
       - proxy
       - internal
@@ -43,7 +43,7 @@ services:
       start_period: 2m
 
   app:
-    image: "matrixdotorg/synapse:v1.160.0"
+    image: "matrixdotorg/synapse:v1.158.0"
     volumes:
       - "data:/data"
     secrets: