[ci skip] Refactor knowledge: CLAUDE.md 881→190 lines, extract reference data

CLAUDE.md changes:
- Extract service catalog + Cloudflare domains → .claude/reference/service-catalog.md
- Extract Proxmox VMs, hardware, network → .claude/reference/proxmox-inventory.md
- Extract GitHub/Drone API patterns → .claude/reference/github-drone-api.md
- Extract Authentik state snapshot → .claude/reference/authentik-state.md
- Remove Init Container pattern (duplicates setup-project skill)
- Remove Poison Fountain service notes (duplicates Anti-AI section)
- Consolidate Authentik section (link to skills + reference)
- Remove resource limit tables (kept tier definitions inline)

Skill merges (37→32):
- helm-release-force-rerender + helm-stuck-release-recovery → helm-release-troubleshooting
- containerd-multi-registry-pull-through-cache + k8s-docker-registry-cache-bypass → k8s-container-image-caching
- (traefik merges in previous commits)

.claude/reference/github-drone-api.md

@@ -0,0 +1,50 @@
+# GitHub & Drone CI API Reference
+
+> Token locations and common API patterns.
+
+## GitHub API
+- **Username**: `ViktorBarzin`
+- **Token**: `grep github_pat terraform.tfvars | cut -d'"' -f2` (git-crypt encrypted)
+- **Scopes**: Full access (repo, admin:public_key, admin:repo_hook, delete_repo, admin:org, workflow, write:packages)
+- **`gh` CLI**: Blocked by sandbox — use `curl` instead
+
+```bash
+GITHUB_TOKEN=$(grep github_pat terraform.tfvars | cut -d'"' -f2)
+
+# List repos
+curl -s -H "Authorization: token $GITHUB_TOKEN" "https://api.github.com/users/ViktorBarzin/repos?per_page=100"
+
+# Create repo
+curl -s -X POST -H "Authorization: token $GITHUB_TOKEN" "https://api.github.com/user/repos" \
+  -d '{"name":"repo-name","private":true}'
+
+# Add deploy key
+curl -s -X POST -H "Authorization: token $GITHUB_TOKEN" "https://api.github.com/repos/ViktorBarzin/<repo>/keys" \
+  -d '{"title":"key-name","key":"ssh-ed25519 ...","read_only":false}'
+
+# Create webhook
+curl -s -X POST -H "Authorization: token $GITHUB_TOKEN" "https://api.github.com/repos/ViktorBarzin/<repo>/hooks" \
+  -d '{"config":{"url":"https://drone.viktorbarzin.me/hook","content_type":"json","secret":"..."},"events":["push","pull_request"]}'
+```
+
+## Drone CI API
+- **Server**: `https://drone.viktorbarzin.me`
+- **Token**: `grep drone_api_token terraform.tfvars | cut -d'"' -f2`
+
+```bash
+DRONE_TOKEN=$(grep drone_api_token terraform.tfvars | cut -d'"' -f2)
+
+# Activate repo
+curl -s -X POST -H "Authorization: Bearer $DRONE_TOKEN" "https://drone.viktorbarzin.me/api/repos/ViktorBarzin/<repo>"
+
+# Trigger build
+curl -s -X POST -H "Authorization: Bearer $DRONE_TOKEN" "https://drone.viktorbarzin.me/api/repos/ViktorBarzin/<repo>/builds"
+
+# Add secret
+curl -s -X POST -H "Authorization: Bearer $DRONE_TOKEN" "https://drone.viktorbarzin.me/api/repos/ViktorBarzin/<repo>/secrets" \
+  -d '{"name":"secret_name","data":"secret_value"}'
+```
+
+## Capabilities
+- **GitHub**: Create/delete repos, push code, manage SSH/deploy keys, manage webhooks, manage org settings, manage packages
+- **Drone CI**: Activate repos, trigger/monitor builds, manage secrets, configure pipelines