rename dmc12 inventory to cloudlorean and vault admin_password

- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update
  all README/AGENTS call examples and the inventory table
- move admin_password hash into encrypted vault.yml; remove plaintext copies
  from roles/bootstrap/defaults and group_vars/external.yml
- bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring)
- monitoring: PSK config/registration updates, docker role defaults,
  os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks
- add .project-wiki knowledge base and .github agent instructions

.project-wiki/alerts/INDEX.md

@@ -0,0 +1,22 @@
+# Alerts
+
+This section tracks significant warning conditions: risks, contradictions, blocking gaps, undocumented assumptions, and inconsistencies that could affect requirements, architecture, implementation, security, compliance, data handling, or project planning.
+
+## Open Alerts
+
+- None.
+
+## Resolved, Dismissed, Or Accepted-Risk Alerts
+
+- [ALERT-20260909-001](./ALERT-20260909-001.md) - **resolved (2026-09-09)**:
+  plaintext `admin_password` SHA-512 hash moved to encrypted `vault.yml`
+  (`bootstrap.yml` loads it via `vars_files`); plaintext copies removed.
+- [ALERT-20260909-002](./ALERT-20260909-002.md) - **resolved (2026-09-09)**:
+  README/AGENTS/role READMEs updated to the `cloudlorean` inventory; the
+  rename and the working-tree change set committed as one coherent change.
+
+## Rules
+
+- Do not create alerts for every suggested question.
+- Resolve alerts with evidence instead of deleting them.
+- Keep `STATUS.md` updated with compact active alert counts.