Initial commit: cleaned project structure

- Consolidated documentation from Ralph Loop iterations
- Archived 20+ outdated/superseded files to .archive/
- Kept essential docs: OIDC integration, mobile setup, quick start
- Added operational scripts for health monitoring and backup
- Research artifacts preserved in .tasks/artifacts/

Current state:
- 3 VPS sites (fry, proton, photon) ONLINE in Pangolin
- brn-home site pending for local services (Jellyfin, etc.)
- Mobile access configuration pending

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

.tasks/state.json

@@ -0,0 +1,80 @@
+{
+  "tasks": [
+    {
+      "id": "TASK-001",
+      "name": "Analyze Traefik configuration",
+      "status": "completed",
+      "completed_at": "2026-01-20T21:15:00+00:00",
+      "artifacts": [
+        "/home/olaf/pangolin/.tasks/artifacts/traefik-analysis.md"
+      ]
+    },
+    {
+      "id": "TASK-002",
+      "name": "Generate Authentik secrets",
+      "status": "completed",
+      "completed_at": "2026-01-20T20:47:00+00:00",
+      "artifacts": [
+        "/home/olaf/pangolin/.tasks/artifacts/authentik.env"
+      ]
+    },
+    {
+      "id": "TASK-004",
+      "name": "Create DNS records for SSO control plane",
+      "status": "completed",
+      "completed_at": "2026-01-20T21:02:00+00:00",
+      "artifacts": [
+        "sso.obr.sh \u2192 31.24.10.184 (A) and 2001:8e0:9ff:21a0:12ff:e0ff:fe3c:3616 (AAAA)",
+        "tunnel.obr.sh \u2192 31.24.10.184 (A) and 2001:8e0:9ff:21a0:12ff:e0ff:fe3c:3616 (AAAA)",
+        "remote.obr.sh \u2192 31.24.10.184 (A) and 2001:8e0:9ff:21a0:12ff:e0ff:fe3c:3616 (AAAA)"
+      ]
+    },
+    {
+      "id": "RESEARCH-002",
+      "name": "Research Authentik best practices for single-user/admin deployments",
+      "status": "completed",
+      "completed_at": "2026-01-20T21:15:00+00:00",
+      "artifacts": [
+        "/home/olaf/pangolin/.tasks/artifacts/authentik-research.md"
+      ]
+    },
+    {
+      "id": "RESEARCH-004",
+      "name": "Jellyfin SSO-Auth Plugin Research",
+      "status": "completed",
+      "completed_at": "2026-01-20T20:50:00+00:00",
+      "artifacts": [
+        "/home/olaf/pangolin/.tasks/artifacts/jellyfin-sso-research.md"
+      ]
+    },
+    {
+      "id": "RESEARCH-001",
+      "name": "Research Pangolin self-hosting documentation",
+      "status": "completed",
+      "completed_at": "2026-01-20T21:30:00+00:00",
+      "artifacts": [
+        "/home/olaf/pangolin/.tasks/artifacts/pangolin-research.md"
+      ]
+    },
+    {
+      "id": "RESEARCH-003",
+      "name": "Research Apache Guacamole OIDC integration with Authentik",
+      "status": "completed",
+      "completed_at": "2026-01-20T21:40:00+00:00",
+      "artifacts": [
+        "/home/olaf/pangolin/.tasks/artifacts/guacamole-research.md"
+      ]
+    },
+    {
+      "id": "RESEARCH-005",
+      "name": "OpenWebUI OIDC Integration Variables Research",
+      "status": "completed",
+      "completed_at": "2026-01-20T21:35:00+00:00",
+      "artifacts": [
+        "/home/olaf/pangolin/.tasks/artifacts/openwebui-research.md"
+      ]
+    }
+  ],
+  "started_at": "2026-01-20T20:45:25+00:00",
+  "plan": "Pangolin+Authentik+Guacamole SSO Implementation"
+}