S16-S24: Remaining-Work plan, thesaurus occurrences, deploy docs

VARIABLES.md, MODULE writer, catalog review covers subjects.json,
deploy rsyncs system HTML/PDF and SM docs.

docs/modules/peergos-for-compliance-admin.md

@@ -0,0 +1,40 @@
+# MODULE — peergos-for-compliance-admin
+
+Git: https://git.georgelambert.org/marchon/peergos-for-compliance-admin
+
+
+This is **not** a HIPAA/SOC 2/ISO certificate.
+Vocabulary: see `https://git.georgelambert.org/marchon/system-git-sync` `docs/thesaurus.md`.
+Catalog: `https://git.georgelambert.org/marchon/nats-service-endpoints`.
+
+
+## What this module is
+
+Runtime or documentation unit in the Peergos-for-compliance / secure-messaging
+set. See this repo `README.md` for the short intro.
+
+## Who calls this module and why
+
+Operators in the browser SPA.
+
+**Callers:** https://pfc.georgelambert.org (Caddy → 127.0.0.1:18780).
+
+## Messages — from / to
+
+- **From:** Login/TOTP, cube/catalog/inspect/audit HTTP; NATS when bus configured.
+- **To:** CubeStore, UserStore, signed config, sm-leaf, pin, repl.
+
+## Filters / security
+
+`PFC_REQUIRE_AUTH=1`; TOTP for hipaa; k-of-n inspect; unsigned config rejected.
+
+## Errors and timeouts
+
+- **Errors:** 401 auth, 403 totp/admin, 400 profile, 501 missing signing key.
+- **Timeouts:** HTTP 8s in tests; NATS 5s.
+
+## Where data is stored and how others use it
+
+`PFC_DATA` users + cubes; host PEM for Ed25519.
+
+Walkthroughs and screenshots: `https://git.georgelambert.org/marchon/peergos-compliance-docs` (`source/walkthrough.rst`).