fix: restore tree dropped by 6d224861; land stem95su gdrive-sync (10m) [ci skip]

6d224861 came from a --no-checkout worktree whose empty index made the
commit drop every file except two. This restores 05b50d2b's full tree and
correctly adds stacks/stem95su/gdrive-sync.tf + the service-catalog stem95su
entry. Forward-only (parent=6d224861, no force-push); [ci skip] since the
live infra was never applied from the broken commit.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

stacks/kms/files/diag-collector.py

@@ -0,0 +1,33 @@
+import json
+from http.server import BaseHTTPRequestHandler, HTTPServer
+
+MAX = 16384
+
+class Handler(BaseHTTPRequestHandler):
+    def _respond(self, code):
+        self.send_response(code)
+        self.send_header('Content-Length', '0')
+        self.end_headers()
+    def do_POST(self):
+        if self.path.rstrip('/') != '/diag':
+            self._respond(404); return
+        try:
+            n = int(self.headers.get('Content-Length', 0) or 0)
+            n = min(n, MAX) if n > 0 else 0
+            raw = self.rfile.read(n).decode('utf-8', 'replace') if n else ''
+            obj = json.loads(raw) if raw.strip() else {}
+            if not isinstance(obj, dict):
+                obj = {'_raw': str(obj)[:1000]}
+            ip = self.headers.get('X-Forwarded-For', self.client_address[0]).split(',')[0].strip()
+            obj['_ip'] = ip
+            print('KMSDIAG ' + json.dumps(obj, separators=(',', ':'))[:MAX], flush=True)
+        except Exception as e:
+            print('KMSDIAG_ERR ' + repr(e)[:500], flush=True)
+        self._respond(204)
+    def do_GET(self):
+        self._respond(200 if self.path.rstrip('/') in ('/healthz', '/diag') else 404)
+    def log_message(self, *a):
+        pass
+
+if __name__ == '__main__':
+    HTTPServer(('0.0.0.0', 9102), Handler).serve_forever()