chore: add untracked stacks, scripts, and agent configs

- New stacks: beads-server, hermes-agent
- Terragrunt tiers.tf for infra, phpipam, status-page
- Secrets symlinks for vault, phpipam, hermes-agent
- Scripts: cluster_manager, image_pull, containerd pullthrough setup
- Frigate config, audiblez-web app source, n8n workflows dir
- Claude agent: service-upgrade, reference: upgrade-config.json
- Removed: claudeception skill, excalidraw empty submodule, temp listings

[ci skip]

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

stacks/beads-server/main.tf

@@ -0,0 +1,172 @@
+resource "kubernetes_namespace" "beads" {
+  metadata {
+    name = "beads-server"
+    labels = {
+      tier = local.tiers.aux
+    }
+  }
+}
+
+resource "kubernetes_persistent_volume_claim" "dolt_data" {
+  wait_until_bound = false
+  metadata {
+    name      = "dolt-data"
+    namespace = kubernetes_namespace.beads.metadata[0].name
+    annotations = {
+      "resize.topolvm.io/threshold"     = "80%"
+      "resize.topolvm.io/increase"      = "100%"
+      "resize.topolvm.io/storage_limit" = "10Gi"
+    }
+  }
+  spec {
+    access_modes       = ["ReadWriteOnce"]
+    storage_class_name = "proxmox-lvm"
+    resources {
+      requests = { storage = "2Gi" }
+    }
+  }
+}
+
+resource "kubernetes_config_map" "dolt_init" {
+  metadata {
+    name      = "dolt-init"
+    namespace = kubernetes_namespace.beads.metadata[0].name
+  }
+  data = {
+    "01-create-beads-user.sql" = <<-EOT
+      CREATE USER IF NOT EXISTS 'beads'@'%' IDENTIFIED BY '';
+      GRANT ALL PRIVILEGES ON *.* TO 'beads'@'%' WITH GRANT OPTION;
+    EOT
+  }
+}
+
+resource "kubernetes_deployment" "dolt" {
+  metadata {
+    name      = "dolt"
+    namespace = kubernetes_namespace.beads.metadata[0].name
+    labels = {
+      app  = "dolt"
+      tier = local.tiers.aux
+    }
+  }
+  spec {
+    replicas = 1
+    strategy {
+      type = "Recreate"
+    }
+    selector {
+      match_labels = {
+        app = "dolt"
+      }
+    }
+    template {
+      metadata {
+        labels = {
+          app = "dolt"
+        }
+      }
+      spec {
+        container {
+          name  = "dolt"
+          image = "dolthub/dolt-sql-server:latest"
+
+          port {
+            name           = "mysql"
+            container_port = 3306
+          }
+
+          env {
+            name  = "DOLT_ROOT_HOST"
+            value = "%"
+          }
+
+          volume_mount {
+            name       = "dolt-data"
+            mount_path = "/var/lib/dolt"
+          }
+          volume_mount {
+            name       = "init-scripts"
+            mount_path = "/docker-entrypoint-initdb.d"
+            read_only  = true
+          }
+
+          startup_probe {
+            tcp_socket {
+              port = 3306
+            }
+            failure_threshold = 30
+            period_seconds    = 2
+          }
+          liveness_probe {
+            tcp_socket {
+              port = 3306
+            }
+            initial_delay_seconds = 10
+            period_seconds        = 30
+          }
+          readiness_probe {
+            tcp_socket {
+              port = 3306
+            }
+            initial_delay_seconds = 5
+            period_seconds        = 10
+          }
+
+          resources {
+            requests = {
+              memory = "256Mi"
+              cpu    = "50m"
+            }
+            limits = {
+              memory = "512Mi"
+            }
+          }
+        }
+
+        volume {
+          name = "dolt-data"
+          persistent_volume_claim {
+            claim_name = kubernetes_persistent_volume_claim.dolt_data.metadata[0].name
+          }
+        }
+        volume {
+          name = "init-scripts"
+          config_map {
+            name = kubernetes_config_map.dolt_init.metadata[0].name
+          }
+        }
+      }
+    }
+  }
+  lifecycle {
+    ignore_changes = [
+      spec[0].template[0].spec[0].dns_config
+    ]
+  }
+}
+
+resource "kubernetes_service" "dolt" {
+  metadata {
+    name      = "dolt"
+    namespace = kubernetes_namespace.beads.metadata[0].name
+    labels = {
+      app = "dolt"
+    }
+    annotations = {
+      "metallb.universe.tf/loadBalancerIPs" = "10.0.20.200"
+      "metallb.io/allow-shared-ip"          = "shared"
+    }
+  }
+  spec {
+    type                    = "LoadBalancer"
+    external_traffic_policy = "Cluster"
+    selector = {
+      app = "dolt"
+    }
+    port {
+      name        = "mysql"
+      port        = 3306
+      target_port = 3306
+    }
+  }
+}

stacks/beads-server/terragrunt.hcl

@@ -0,0 +1,3 @@
+include "root" {
+  path = find_in_parent_folders()
+}

stacks/beads-server/tiers.tf

@@ -0,0 +1,10 @@
+# Generated by Terragrunt. Sig: nIlQXj57tbuaRZEa
+locals {
+  tiers = {
+    core    = "0-core"
+    cluster = "1-cluster"
+    gpu     = "2-gpu"
+    edge    = "3-edge"
+    aux     = "4-aux"
+  }
+}