rename dmc12 inventory to cloudlorean and vault admin_password

- replace inventory/dmc12.yml with cloudlorean.yml (+ group_vars) and update
  all README/AGENTS call examples and the inventory table
- move admin_password hash into encrypted vault.yml; remove plaintext copies
  from roles/bootstrap/defaults and group_vars/external.yml
- bootstrap.yml loads vault.yml via vars_files (same pattern as monitoring)
- monitoring: PSK config/registration updates, docker role defaults,
  os-updates logging/reboot refinements, ansible.cfg/execute.sh tweaks
- add .project-wiki knowledge base and .github agent instructions

inventory/home.yml

@@ -1,20 +1,24 @@
 home:
   children:
     debian:
-      hosts:
-        rp:
-          ansible_host: 10.13.37.11
-        paperless:
-          ansible_host: 10.13.37.30
-        homeassistant:
-          ansible_host: 10.13.37.15
-        teleport-jumper:
-          ansible_host: 10.13.37.50
-        idris-dns:
-          ansible_host: 10.13.37.53
-        it-tools:
-          ansible_host: 10.13.37.16
     proxmox:
-      hosts:
-        tardis:
-          ansible_host: 10.13.37.5
+
+
+debian:
+  hosts:
+    rp:
+      ansible_host: 10.13.37.11
+    paperless:
+      ansible_host: 10.13.37.30
+    homeassistant:
+      ansible_host: 10.13.37.15
+    teleport-jumper:
+      ansible_host: 10.13.37.50
+    idris-dns:
+      ansible_host: 10.13.37.53
+    it-tools:
+      ansible_host: 10.13.37.16
+proxmox:
+  hosts:
+    tardis:
+      ansible_host: 10.13.37.5