Rename reinstall-mode prompt; make security-dashboard's "Full reinstall" a real teardown

Two-part change discussed and scoped in this session before touching
anything:

1. Rename "Reinstall in place" (r) -> "Update" (u) and "Full install" (f)
   -> "Full reinstall" everywhere the prompt appears: lib/common.sh's
   shared prompt_reinstall_mode(), plus the three services that carry
   their own duplicated standalone-stub copy of it for standalone
   execution (asterisk.sh, coturn.sh, wordpress.sh — per this repo's
   documented standalone-bootstrap pattern). Internal state values
   (update/fresh/cancel) are unchanged, so no other service's case
   statement needed touching. docs/anveo-direct-setup-guide.md's `r`
   reference updated to `u` to match. attic/asterisk-digital-ocean.sh
   deliberately left alone — this repo's own policy is to not backport
   fixes into attic/.

2. security-dashboard.sh's "Full reinstall" now does a real teardown
   before reinstalling — stops and removes the systemd unit, sudoers
   grant, Caddy site block, and secdash system user, then proceeds
   through the normal fresh-install flow — instead of just overwriting
   files in place while leaving the old service running underneath.
   Prototype for a pattern discussed for other services later: split the
   destructive question out explicitly ("also delete
   dashboard-admins.conf — per-admin extension scoping?", default n) so
   full reinstall doesn't silently discard state a plain "start over"
   request wouldn't expect to lose. Verified the backup/restore mechanics
   (mktemp, copy out before teardown, copy back after) against a mock
   under `set -u` for both the preserve and wipe paths before shipping.

Update mode was already the strongest existing example of surfacing
newer optional prompts (its "Reconfigure Caddy protection?" /
"Reconfigure per-admin scoping?" sub-prompts already cover every setting
fresh-install offers) — no changes needed there for this service.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01H4k6J1qXXyYxhGEgnJaMvn

lib/common.sh

@@ -718,12 +718,12 @@ prompt_reinstall_mode() {
         return
     fi
     echo "  Existing install detected. Choose:"
-    echo "    r) Reinstall in place — refresh vendor files/config, keep existing settings"
-    echo "    f) Full install — re-run every prompt from scratch"
+    echo "    u) Update — refresh vendor files/config, keep existing settings"
+    echo "    f) Full reinstall — re-run every prompt from scratch"
     echo "    c) Cancel — leave everything as-is [default]"
-    read -p "  Choice [r/f/c, Enter=cancel]: " response
+    read -p "  Choice [u/f/c, Enter=cancel]: " response
     case "${response,,}" in
-        r) eval "$varname='update'" ;;
+        u) eval "$varname='update'" ;;
         f) eval "$varname='fresh'" ;;
         *) eval "$varname='cancel'" ;;
     esac