Bump version to 3.6.5, update CHANGELOG for v3.6.2–v3.6.5

Fix search engine config not applied when using presets

- Make search engine comparison case-insensitive across all platforms
- Skip PopulateFromConfig when preset is selected to prevent old config
  values from overriding preset values
- Remove opensearch-security plugin in Dockerfile for OpenSearch 2.12+
  compatibility

Remove trailing slash from root path variables in nginx configs

Eliminates double slashes in resolved paths for $MAGE_ROOT and
$SITE_ROOT across magento2, prestashop, and shared nginx snippets.

Use host-gateway instead of outbound IP for container host resolution

Fixes connectivity issues on WSL2 and macOS where containers couldn't
reach host-bound ports (e.g. 443) via the outbound IP. Docker's
host-gateway resolves to the correct IP on all platforms.

Fix MADOCK_USER not working with madock bash

The bash controller ignored MADOCK_USER environment variable because
it never called GetEnvForUserServiceWorkdir. Now env overrides are
applied before flag overrides, consistent with the cli controller.

Move DB credentials from Dockerfile ENV to docker-compose environment

Passwords are no longer baked into Docker image layers. Instead, they are
passed at container runtime via docker-compose environment variables.
Affects mysql, postgresql, mongodb, and db2 services.

Fix db/type migration not running for existing users

The v3.4.0 migration guard was lower than the stored version (3.5.7+),
so it never executed. Added v3.5.9 re-run guard and bumped version.go.

Update CHANGELOG for v3.5.8 — db/type migration

Fix .madock/config.xml writes in SetEnvForProject and GetCurrentProje…

…ctConfigPath

Go module proxy cached v3.5.6 before the fix was pushed, so bump to v3.5.7.

Fix remaining .madock/config.xml write paths in SetEnvForProject and …

…GetCurrentProjectConfigPath