rename dmc12 inventory to cloudlorean and vault admin_password

- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update
  all README/AGENTS call examples and the inventory table
- move admin_password hash into encrypted vault.yml; remove plaintext copies
  from roles/bootstrap/defaults and group_vars/external.yml
- bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring)
- monitoring: PSK config/registration updates, docker role defaults,
  os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks
- add .project-wiki knowledge base and .github agent instructions

inventory/external.yml

@@ -1,3 +1,7 @@
+external:
+  children:
+    debian:
+
 debian:
   hosts:
     healthcheck:
@@ -7,4 +11,4 @@ debian:
     teleport:
       ansible_host: 2a01:4f8:1c19:c7d::1
     podcast-linkstack:
-      ansible_host: 2a01:4f8:c17:de13::1
+      ansible_host: 2a01:4f8:c17:de13::1