fix(authentik): align install with two-volume layout from ct/authentik.sh

- drop redundant curl of default.yml (file is part of release tarball)
- stop creating /opt/authentik-data dirs in install (mounted later as separate volume)
- enable services without --now in install (started after data volume is attached)

ct/authentik.sh

@@ -71,8 +71,6 @@ function update_script() {
 
     msg_info "Updating go proxy"
     cd /opt/authentik
-    $STD curl -fsSL "https://raw.githubusercontent.com/goauthentik/authentik/refs/tags/${AUTHENTIK_VERSION}/authentik/lib/default.yml" \
-      -o /opt/authentik/authentik/lib/default.yml
     export CGO_ENABLED="1"
     $STD go mod download
     $STD go build -o /opt/authentik/authentik-server ./cmd/server