feat: add gated Compose deploy and make inventory the host source of truth

Keep sanitized Compose sources in-repo with a confirmation-gated Ansible
playbook, add repo-wide validation, tighten runbook ownership/STOP/review
metadata, and archive stale research docs.

Co-authored-by: Cursor <cursoragent@cursor.com>

runbooks/rustdesk-health.md

@@ -9,6 +9,12 @@ Read-only health check of the `/opt/rustdesk` server stack.
 - Applicable: [hk2.chans.xyz](../hosts/hk2.chans.xyz.md), `/opt/rustdesk`.
 - Read-only: does not change RustDesk configuration or service state.
 
+## Ownership
+
+- Owner: personal ops (Windy)
+- Last reviewed: 2026-08-17
+- Related systems: hk2.chans.xyz (`/opt/rustdesk`)
+
 Read-only checks for the `/opt/rustdesk` stack on **hk2.chans.xyz**.
 
 Facts: [hosts/hk2.chans.xyz.md](../hosts/hk2.chans.xyz.md)