Cover what Dokploy v0.30 added

Six new resources, all backed by endpoints that did not exist before v0.30.0
and verified end-to-end against a live v0.30.2 instance:

  dokploy_network         Docker networks, now first-class. Services attach
                          through network_ids, which is what deprecates
                          Compose's isolated_deployment upstream.
  dokploy_dns_provider    Cloudflare or Route53, so adding a domain creates
                          its DNS record.
  dokploy_vault_provider  Env values resolved from HashiCorp Vault, Infisical,
                          AWS, Doppler, Azure or Scaleway at deploy time, so
                          the secret never lands in Dokploy or in state.
  dokploy_schedule        Cron jobs in a container, a stack, or on a server.
  dokploy_volume_backup   Scheduled backups of a named volume — the companion
                          to a mount that persists.
  dokploy_libsql          The sixth managed database engine.

libsql.create is the strictest endpoint in the API: eleven keys required to
be present, several only meaningfully null, no generated service name, and it
returns `true` rather than the row. CreateDefaults and ListIDs absorb all
three so the resource behaves like every other database.

Also filled the gaps a field-by-field diff against the live schema turned up:
domain gains `enabled` (the v0.30.0 park-a-domain toggle), compose gains
create_env_file, icon and service_networks, application gains icon and
preview_require_collaborator_permissions, and mounts accept libsql.

DNS and vault credentials are masked by Dokploy on read, so `config` is
tagged noread and keeps the configured value, as the basic-auth password
already does.

internal/provider/resource_networking.go

@@ -29,6 +29,7 @@ type domainModel struct {
 	StripPath           types.Bool   `tfsdk:"strip_path" dokploy:"stripPath"`
 	Middlewares         types.List   `tfsdk:"middlewares" dokploy:"middlewares"`
 	ForwardAuthEnabled  types.Bool   `tfsdk:"forward_auth_enabled" dokploy:"forwardAuthEnabled"`
+	Enabled             types.Bool   `tfsdk:"enabled" dokploy:"enabled,nullable"`
 	ApplicationID       types.String `tfsdk:"application_id" dokploy:"applicationId,create"`
 	ComposeID           types.String `tfsdk:"compose_id" dokploy:"composeId,create"`
 	PreviewDeploymentID types.String `tfsdk:"preview_deployment_id" dokploy:"previewDeploymentId,create"`
@@ -65,9 +66,12 @@ func domainResource() ResourceSpec {
 					"traffic. Required when `compose_id` is set."),
 				"internal_path": optionalComputedString("Path the request is rewritten to before it reaches the " +
 					"container, defaults to `/`."),
-				"strip_path":            optionalComputedBool("Strip `path` from the request before forwarding it."),
-				"middlewares":           optionalComputedStringList("Names of Traefik middlewares to apply."),
-				"forward_auth_enabled":  optionalComputedBool("Protect this domain with Dokploy's forward auth."),
+				"strip_path":           optionalComputedBool("Strip `path` from the request before forwarding it."),
+				"middlewares":          optionalComputedStringList("Names of Traefik middlewares to apply."),
+				"forward_auth_enabled": optionalComputedBool("Protect this domain with Dokploy's forward auth."),
+				"enabled": optionalComputedBool("Whether the domain is served. Setting this to `false` removes " +
+					"the route from Traefik but keeps the certificate, path and middleware configuration intact, " +
+					"so the domain can be brought back without reconfiguring it."),
 				"application_id":        optionalReplaceString("Application this domain routes to."),
 				"compose_id":            optionalReplaceString("Compose stack this domain routes to."),
 				"preview_deployment_id": optionalReplaceString("Preview deployment this domain routes to."),