rename dmc12 inventory to cloudlorean and vault admin_password

- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update
  all README/AGENTS call examples and the inventory table
- move admin_password hash into encrypted vault.yml; remove plaintext copies
  from roles/bootstrap/defaults and group_vars/external.yml
- bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring)
- monitoring: PSK config/registration updates, docker role defaults,
  os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks
- add .project-wiki knowledge base and .github agent instructions

.project-wiki/implementation/INDEX.md

@@ -0,0 +1,18 @@
+# Implementation
+
+This section tracks current plans, work items, scans, and synchronization reports.
+
+## When To Read
+
+- Review active implementation work or repository scan history.
+
+## Key Files
+
+- [Current plan](./current-plan.md)
+- [Work items](./work-items/)
+- [Scans and sync reports](./scans/)
+- [Scan 2026-09-09](./scans/scan-20260909.md) - full repository scan with confirmed/inferred/unknown findings
+
+## Placeholders Or Stale Areas
+
+- `current-plan.md` is still a placeholder; no active plan captured yet.