Use slapos.cookbook:generate.password in to create a random password for the mariadb instance.

Remove db-password from the stack/lamp API so that the password can no longer be set with:

[application]
db-password = <password>

Also, fix monitor aggregation for the stack/lamp instance tree.

Adapt sofware/nextcloud and software/matomo.