added ftp controlservice health check and fixed gallery js error

docs/ops/photobooth/control_service.md

@@ -7,6 +7,7 @@ The control service is a lightweight sidecar responsible for provisioning vsftpd
 - **Scheme:** Bearer token.
 - **Header:** `Authorization: Bearer ${PHOTOBOOTH_CONTROL_TOKEN}`.
 - **Timeout:** Configurable via `PHOTOBOOTH_CONTROL_TIMEOUT` (default 5 s).
+- **Token generation:** `openssl rand -hex 32` (or `php -r "echo bin2hex(random_bytes(32)), "`); store in `.env`/Dokploy secrets as `PHOTOBOOTH_CONTROL_TOKEN`.
 
 ## Endpoints
 
@@ -43,6 +44,8 @@ Implementation tips:
 - Apply the rate limit token-bucket before writing to disk (or integrate with HAProxy).
 - Store `expires_at` and automatically disable the account when reached (in addition to Laravel’s scheduled cleanup).
 
+Reference implementation (current stack): `photobooth-ftp` builds from `docker/photobooth-control`, starts pure-ftpd and a Node-based control API on port 8080. Healthcheck: `GET /health` on 8080 (wired in docker-compose.dokploy.yml). Rate-limit/expiry enforcement inside the FTP tier is still to be implemented.
+
 ### `POST /users/{username}/rotate`
 
 ```json