Capture current Ansible control plane state

Commit the accumulated infrastructure work that was living only in the
working tree: monitoring stack, emergency access/bot, gyro allocator,
grimmory, adguard, backup audit and the OpenCode agent definitions.

Also ignore Python bytecode, local archives and Nix/direnv artifacts.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01GTocXkGUUazHdKKd3r9k71

ansible/roles/pve_lxc/defaults/main.yml

@@ -1,7 +1,7 @@
 ---
 pve_lxc_vmid: 132
 pve_lxc_node: mini-pc
-pve_lxc_hostname: wg-mini
+pve_lxc_hostname: ovpn-mini
 pve_lxc_ip: 192.168.1.23/24
 pve_lxc_gateway: 192.168.1.1
 pve_lxc_bridge: vmbr0
@@ -13,8 +13,10 @@ pve_lxc_swap: 128
 pve_lxc_onboot: true
 pve_lxc_startup: order=30
 pve_lxc_unprivileged: true
+pve_lxc_update: true
 pve_lxc_features:
   - nesting=1
 pve_lxc_nameserver: 1.1.1.1
 pve_lxc_pubkey_file: ~/.ssh/id_ed25519_homelab.pub
 pve_lxc_cmode: shell
+pve_lxc_api_port: "{{ lookup('env', 'PROXMOX_PORT') | default('8006', true) | int }}"