Configures a single NATS 2.10 service exposing a WebSocket listener on :8080 (no_tls; Traefik terminates TLS at nats.volcanic.tes.gd) with env-driven username/password auth and a persisted JetStream store.
