rename dmc12 inventory to cloudlorean and vault admin_password

- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update
  all README/AGENTS call examples and the inventory table
- move admin_password hash into encrypted vault.yml; remove plaintext copies
  from roles/bootstrap/defaults and group_vars/external.yml
- bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring)
- monitoring: PSK config/registration updates, docker role defaults,
  os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks
- add .project-wiki knowledge base and .github agent instructions

.project-wiki/templates/document-intake-review.md

@@ -0,0 +1,58 @@
+---
+id: DOCIN-YYYYMMDD-001-REVIEW
+type: intake-review
+status: reviewed
+title: Review - Source Document Title
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+tags: [intake, review]
+related: [DOCIN-YYYYMMDD-001]
+source_paths: []
+confidence: inferred
+---
+
+# Document Intake Review - Source Document Title
+
+## Review Coverage
+
+- Ledger: [review-progress.yml](./review-progress.yml)
+- Total chunks: TBD
+- Classified: TBD
+- Skipped with reason: TBD
+- Pending or reviewed: 0
+- Validator result: passed
+
+## Blocking Decision Needed
+
+- Exact question: TBD
+- Why conservative integration cannot proceed: TBD
+- Approval authority: TBD
+
+## Options And Consequences
+
+| Option | Canonical Effect | Risks Or Trade-Offs | Evidence |
+| --- | --- | --- | --- |
+| TBD | TBD | TBD | TBD |
+
+## Affected Canonical Scope
+
+| Candidate | Proposed Target | Action | Rationale |
+| --- | --- | --- | --- |
+| DOCIN-YYYYMMDD-001-CH-001 | requirements/functional/<project-topic>.md or requirements/non-functional/<project-topic>.md | Add requirement | TBD |
+
+## Affected Atomic Requirement Plan
+
+Include this section only when the blocking decision changes requirement topic scope, target files, or permitted ID ranges. Complete the full decomposition plan after approval and before canonical authoring.
+
+| Family | Topic | Target File | Reserved IDs | Planned Atomic Records | Evidence Chunks |
+| --- | --- | --- | --- | ---: | --- |
+| functional | Authentication | requirements/functional/authentication.md | REQ-001..REQ-005 | 5 | DOCIN-YYYYMMDD-001-CH-001, DOCIN-YYYYMMDD-001-CH-002 |
+| non-functional | Security | requirements/non-functional/security.md | NFR-001..NFR-003 | 3 | DOCIN-YYYYMMDD-001-CH-003 |
+
+## Related Durable Records
+
+- Open questions, alerts, blocked records, or alternatives that preserve non-blocking uncertainty: TBD
+
+## Approval Outcome
+
+Pending user confirmation.