Document every repo in Sphinx, catalog PDFs, and verae-ops

Add missing package READMEs, expand Sphinx to all runtime modules,
publish a LaTeX/PDF README book, and add verae-ops for Docker,
Proxmox, VMs, dedicated hardware, and service linking. Catalog
defaults to public PDF links for each module README and samples.

docs/sphinx/repos/verae-tree-node.md

@@ -0,0 +1,31 @@
+# verae-tree-node
+
+Bloom-filtered WORM store for Merkle **leaf** proofs. Only the Merkle **root** is sealed on the chain.
+
+**Forgejo:** https://git.georgelambert.org/marchon/verae-tree-node  
+**Catalog:** https://zapier.georgelambert.org/packages/verae-tree-node/README.pdf  
+**User lookup guide:** https://zapier.georgelambert.org/user-docs/09-lookup-tree-nodes.pdf
+
+When Zapier submits a **batch**, middleware builds a Merkle tree of item SHA-256s, seals **only the root** on `api.veraetime.net`, and puts each leaf proof on a sharded tree node. A later lookup of a leaf that is not on the main chain fans out `verae.archive.query` with `kinds: ["tree"]`. Nodes that do not hold the leaf send **nothing**.
+
+## Run
+
+```bash
+cd packages/verae-tree-node
+npm test
+```
+
+Fleet **keepFloor min=3**. Pause does not count toward the floor.
+
+## Addresses
+
+Same as archive-worm, with `kind=tree`: `verae.archive.put` / `query` / `reply.<id>` (hit only).
+
+## Depends on
+
+- NATS (private)
+- archive-aggregator for bulk lookup
+- fleet replica floor
+- chain holds the root only
+
+Clone: `ssh://git@git.georgelambert.org:2223/marchon/verae-tree-node.git`