S16-S24: Remaining-Work plan, thesaurus occurrences, deploy docs

VARIABLES.md, MODULE writer, catalog review covers subjects.json,
deploy rsyncs system HTML/PDF and SM docs.

docs/modules/peergos-compliance-config.md

@@ -0,0 +1,40 @@
+# MODULE — peergos-compliance-config
+
+Git: https://git.georgelambert.org/marchon/peergos-compliance-config
+
+
+This is **not** a HIPAA/SOC 2/ISO certificate.
+Vocabulary: see `https://git.georgelambert.org/marchon/system-git-sync` `docs/thesaurus.md`.
+Catalog: `https://git.georgelambert.org/marchon/nats-service-endpoints`.
+
+
+## What this module is
+
+Runtime or documentation unit in the Peergos-for-compliance / secure-messaging
+set. See this repo `README.md` for the short intro.
+
+## Who calls this module and why
+
+Operator building `pfc.json` before signing.
+
+**Callers:** Browser SPA `config.pfc.georgelambert.org`, bash/curses TUI, pfc-configd.
+
+## Messages — from / to
+
+- **From:** Host, leaf hub, NATS URL, lab PSK, profile, min_ok.
+- **To:** Download JSON; **must be signed** (`signed_config.sign`) before load.
+
+## Filters / security
+
+Unsigned files rejected at load. Live changes append admin-history.
+
+## Errors and timeouts
+
+- **Errors:** Invalid schema / missing crypto.mode.
+- **Timeouts:** n/a
+
+## Where data is stored and how others use it
+
+`~/pfc.json` or host signed path.
+
+Walkthroughs and screenshots: `https://git.georgelambert.org/marchon/peergos-compliance-docs` (`source/walkthrough.rst`).