rename dmc12 inventory to cloudlorean and vault admin_password

- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update
  all README/AGENTS call examples and the inventory table
- move admin_password hash into encrypted vault.yml; remove plaintext copies
  from roles/bootstrap/defaults and group_vars/external.yml
- bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring)
- monitoring: PSK config/registration updates, docker role defaults,
  os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks
- add .project-wiki knowledge base and .github agent instructions

.project-wiki/templates/scan-report.md

@@ -0,0 +1,38 @@
+---
+id: SCAN-YYYYMMDD
+type: scan-report
+status: active
+title: Codebase Scan YYYY-MM-DD
+created: YYYY-MM-DD
+updated: YYYY-MM-DD
+tags: [scan]
+related: []
+source_paths: []
+confidence: inferred
+---
+
+# Codebase Scan YYYY-MM-DD
+
+## Scope
+
+TBD
+
+## Confirmed Findings
+
+- TBD
+
+## Inferred Findings
+
+- TBD
+
+## Unknowns
+
+- TBD
+
+## Important Paths
+
+- TBD
+
+## Suggested Wiki Updates
+
+- TBD