S00-S04: hub inventory, signed-config design, prompts saved

INVENTORY.md

@@ -0,0 +1,36 @@
+# Inventory — git.georgelambert.org
+
+Forgejo **11.0.16**. Scanned with the `marchon` API token (not stored here).
+
+## Orgs
+
+| Org | Repos | Messaging relevance |
+|---|---|---|
+| `marchon` | 61 | PFC, NATS, access, zapier, ops — **in scope** |
+| `infra` | `coredns`, `caddy` | Edge only; document Caddy docs hosts |
+| `verae` | 0 | Empty; do not invent content |
+| `websites` | 70+ | Marketing/site trees; **inventory only** this round |
+
+## marchon — NATS / DataCube (must stay consistent)
+
+- peergos-for-compliance, peergos-for-compliance-admin, peergos-for-compliance-ipfs, peergos-for-compliance-replication
+- peergos-compliance-{plan,architecture,docker,proxmox,nix,kubernetes,ipfs-pinning,aws-archive,iceberg,docs,config,go}
+- verae-nats-process, verae-nats-accounts, verae-nats-cluster
+- verae-access-{authz,web,api,leaf,zapier,staff}
+- verae-jobs-events, verae-ops, verae-deploy, verae-proxmox, verae-bootstrap
+- verae-archive-worm, verae-archive-aggregator, verae-keep, verae-uptime, verae-backup
+- verae-staff-{session,ui,iam}, verae-fleet, verae-tree-node, verae-middleware
+- verae-request-splitter, verae-activate, verae-zapier-*
+
+## marchon — other (link, do not rewrite)
+
+pulsepolls, datacube-pulsepolls, carpathia, zapier docs/pricing/identity, overview, UI-Docs, dev-overview
+
+## infra
+
+- caddy — future docs Caddy site files
+- coredns — DNS; no NATS subjects
+
+## websites
+
+Site HTML for datacubes.*, verae.*, veraetime.*, georgelambert.org, etc. No NATS endpoint catalog. Listed so the scan is complete; not forked this round.