feat: add gated Compose deploy and make inventory the host source of truth

Keep sanitized Compose sources in-repo with a confirmation-gated Ansible
playbook, add repo-wide validation, tighten runbook ownership/STOP/review
metadata, and archive stale research docs.

Co-authored-by: Cursor <cursoragent@cursor.com>

runbooks/fix-ci.md

@@ -20,6 +20,12 @@ skipping checks or changing unrelated code.
 - Do not change unrelated hosts or services.
 - Prefer read-only diagnosis before mutation; destructive fixes require approval.
 
+## Ownership
+
+- Owner: personal ops (Windy)
+- Last reviewed: 2026-08-17
+- Related systems: Ansible health report / gated playbooks
+
 ## Procedure
 
 ### Step 1 — Reproduce and read