SCIM: publish meta in /Schemas, and run the conformance container on the host network (SCIM-6, SCIM-30)

scim2-client builds its models from /Schemas, so meta is described there
as the mapping tables give it, without lastModified. The tester container
now shares the host's network, so a host firewall that drops the Docker
bridge doesn't block the test server. With SCIM_CONFORMANCE=1, the
scim2-client lifecycle (12 steps), the eight replayed Okta, Keycloak and
Entra payloads, and scim2-tester (errors only for its generated
non-address userName) all pass.

tests/src/utils/containers.rs

@@ -312,6 +312,9 @@ pub async fn ensure_scim_tester() -> &'static ContainerAsync<GenericImage> {
                 .expect("Failed to build the SCIM tester image");
             image
                 .with_host("host.docker.internal", Host::HostGateway)
+                // inbuxa: on the host's network, so a host firewall that
+                // drops the Docker bridge doesn't block the test server
+                .with_network("host")
                 .with_startup_timeout(READY_TIMEOUT)
                 .with_container_name("stalwart-test-scim-tester")
                 .with_reuse(ReuseDirective::Always)