add projects/ - standalone scripts alongside the Docker stacks

Two real, working scripts: an Ansible playbook run-menu (the same
pattern used identically across both the fleet-config and infra-
provisioning repos), and cuesplit, a frame-accurate FLAC/.cue
splitting utility. Sanitized paths only, logic untouched.

README gets a new "Scripts & Tooling" section pointing at it, placed
right after "What's Running" alongside the other repo-structure
pointer.

projects/iac-run-menu/run

@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+set -e
+
+PLAYBOOK="$1"
+
+if [ -z "$PLAYBOOK" ]; then
+  echo "Usage: run <provisioning|initialization|compliance>"
+  exit 1
+fi
+
+ANSIBLE_DIR="/path/to/iac/ansible"
+VENV="$HOME/ansible-modern"
+SSH_KEY="$HOME/.ssh/auto"
+VAULT_FILE="$ANSIBLE_DIR/.vault_pass.txt"
+
+# Decide inventory based on playbook
+case "$PLAYBOOK" in
+  initialization)
+    INVENTORY="$ANSIBLE_DIR/inventory_initialization.yml"
+    ;;
+  provisioning|compliance)
+    INVENTORY="$ANSIBLE_DIR/inventory.yml"
+    ;;
+  *)
+    echo "Unknown playbook: $PLAYBOOK"
+    exit 1
+    ;;
+esac
+
+cd "$ANSIBLE_DIR"
+
+exec "$VENV/bin/ansible-playbook" \
+  -i "$INVENTORY" \
+  "playbooks/${PLAYBOOK}.yml" \
+  --vault-password-file "$VAULT_FILE"