fix: set oom_score_adj to -1000 and document in all docker run commands

Agent-Logs-Url: https://github.com/nextcloud/all-in-one/sessions/40122d48-db6c-4993-a220-40597fcf8262

Co-authored-by: szaimen <42591237+szaimen@users.noreply.github.com>

readme.md

@@ -199,6 +199,7 @@ sudo docker run \
   --sig-proxy=false \
   --name nextcloud-aio-mastercontainer \
   --restart always \
+  --oom-score-adj -1000 \
   --publish 80:80 \
   --publish 8080:8080 \
   --publish 8443:8443 \
@@ -215,6 +216,7 @@ sudo docker run \
   - `--sig-proxy=false` — prevents Ctrl+C in the attached terminal from stopping the container.  
   - `--name nextcloud-aio-mastercontainer` — the container name. Do not change this name; mastercontainer updates rely on it.  
   - `--restart always` — ensures the container restarts automatically with the Docker daemon.  
+  - `--oom-score-adj -1000` — instructs the Linux OOM killer to never kill the mastercontainer, keeping the AIO interface accessible even under memory pressure. `-1000` is the minimum value meaning "never kill".  
   - `--publish 80:80` — publishes container port 80 on host port 80 (used for ACME http-challenge when obtaining certificates, used for for the AIO-interface running inside the mastercontainer). Not required if you run AIO behind a reverse proxy.
   - `--publish 8080:8080` — publishes the AIO interface (self-signed certificate) on host port 8080. You may map a different host port if 8080 is in use (e.g. `--publish 8081:8080`).  
   - `--publish 8443:8443` — publishes the AIO interface with a valid certificate on host port 8443 (requires ports 80 and 8443 to be reachable and a domain pointing to your server). Not required if you run AIO behind a reverse proxy.  
@@ -700,6 +702,7 @@ docker run ^
 --sig-proxy=false ^
 --name nextcloud-aio-mastercontainer ^
 --restart always ^
+--oom-score-adj -1000 ^
 --publish 80:80 ^
 --publish 8080:8080 ^
 --publish 8443:8443 ^