S16-S24: Remaining-Work plan, thesaurus occurrences, deploy docs

VARIABLES.md, MODULE writer, catalog review covers subjects.json,
deploy rsyncs system HTML/PDF and SM docs.

MODULE.md

@@ -0,0 +1,40 @@
+# MODULE — system-git-sync
+
+Git: https://git.georgelambert.org/marchon/system-git-sync
+
+
+This is **not** a HIPAA/SOC 2/ISO certificate.
+Vocabulary: see `https://git.georgelambert.org/marchon/system-git-sync` `docs/thesaurus.md`.
+Catalog: `https://git.georgelambert.org/marchon/nats-service-endpoints`.
+
+
+## What this module is
+
+Runtime or documentation unit in the Peergos-for-compliance / secure-messaging
+set. See this repo `README.md` for the short intro.
+
+## Who calls this module and why
+
+Operators and later agents. Nothing publishes NATS from this repo.
+
+**Callers:** Humans / CI (`cicd/run-review.sh`, `cicd/deploy-ns1.sh`).
+
+## Messages — from / to
+
+- **From:** Promoted SHAs, inventory, remaining-work.
+- **To:** Forgejo remotes and ns1 rsync after tests.
+
+## Filters / security
+
+No auto-deploy. Unsigned config never copied. Websites org inventory-only.
+
+## Errors and timeouts
+
+- **Errors:** Review fail aborts deploy. Binary-busy: stop unit then copy.
+- **Timeouts:** SSH/rsync operator-bound.
+
+## Where data is stored and how others use it
+
+Git only. Live signed files are on the host.
+
+Walkthroughs and screenshots: `https://git.georgelambert.org/marchon/peergos-compliance-docs` (`source/walkthrough.rst`).