Initial VPS operations handbook

ansible/roles/helm_client/defaults/main.yml

@@ -0,0 +1,6 @@
+---
+# Helm is required by the patched matrix-stack release. Existing installs are
+# reported and retained; this role only installs Helm when it is absent.
+helm_client_install_enabled: false
+helm_client_install_script_url: https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3
+helm_client_binary: /usr/local/bin/helm