rename dmc12 inventory to cloudlorean and vault admin_password

- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update
  all README/AGENTS call examples and the inventory table
- move admin_password hash into encrypted vault.yml; remove plaintext copies
  from roles/bootstrap/defaults and group_vars/external.yml
- bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring)
- monitoring: PSK config/registration updates, docker role defaults,
  os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks
- add .project-wiki knowledge base and .github agent instructions

inventory/group_vars/external.yml

@@ -7,5 +7,17 @@ admin_authorized_keys:
   - key: "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIA+EvtGavPlXfv7b00jSYsXX2+IEsqFWupEs6Rzf5z9q root@ansible"
     comment: "Generic Ansible Key"
 
-# Admin user password (hashed with SHA-512)
-admin_password: "$6$NmIxM3ZbJDsbC1E6$BO8ag1ZyBqbhELjk0ppKV0CLnYXhHDp9oZc.jmkc62N9hjwbXihF1FmvsYgMKKINVcwaE73u2dRO8pnE6yEGH/"
+# admin_password lives encrypted in vault.yml (loaded via vars_files in
+# bootstrap.yml); no plaintext fallback per repository vault policy.
+
+monitoring_zabbix_passive_servers: ["2a01:4f8:1c1e:62dd::1"]
+
+# Zabbix server API (password lives in vault.yml as monitoring_zabbix_api_password)
+monitoring_zabbix_api_url: "https://mon.cloudlorean.de/api_jsonrpc.php"
+monitoring_zabbix_api_user: Admin
+monitoring_zabbix_api_validate_certs: true
+
+# Host registration defaults for the home inventory
+monitoring_zabbix_host_groups: ["Linux servers", "Cloudlorean"]
+monitoring_zabbix_templates: ["Linux by Zabbix agent"]
+monitoring_zabbix_docker_templates: ["Docker by Zabbix agent 2"]