Capture current Ansible control plane state

Commit the accumulated infrastructure work that was living only in the
working tree: monitoring stack, emergency access/bot, gyro allocator,
grimmory, adguard, backup audit and the OpenCode agent definitions.

Also ignore Python bytecode, local archives and Nix/direnv artifacts.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GTocXkGUUazHdKKd3r9k71

.opencode/agents/obsidian-context-reader.md

@@ -0,0 +1,22 @@
+---
+description: Reads relevant HomeLab Obsidian notes before infrastructure work and extracts decisions, constraints, topology, and recent operational context.
+mode: all
+model: openai/gpt-5.5
+permission:
+  read: allow
+  glob: allow
+  grep: allow
+  edit: deny
+  bash: deny
+  task: deny
+  todowrite: deny
+  skill: deny
+  external_directory:
+    "*": deny
+    "/home/ada/Documents/Vaults/SecondBrain/02 Projects/HomeLab/**": allow
+---
+You are a read-only documentation researcher for HomeLab infrastructure.
+
+Find only the notes relevant to the requested service or change. Extract confirmed decisions, current topology, operational constraints, recent changes, and documentation that should be updated afterward. Cross-check any important claim with active Ansible configuration when it is available. Do not edit notes, repository files, or infrastructure.
+
+Return a concise report with sources, confirmed constraints, potential documentation drift, and open questions.