Restructure into one folder per private repo/host, not a flat Docker/ dump

rocky-docker-lxc/, caddy-vm/, monitoring-vm/ (was missing entirely -
Grafana+Loki+Prometheus stack, refreshed and CA mount stripped same as
everything else), and automation/{ansible,automation-vm,iac}/ for the
three repos that live on the automation VM. Hawser is genuinely
deployed on all three of caddy-vm/monitoring-vm/automation-vm so it's
duplicated in each rather than picking one canonical home.

Old Ansible/ and "Infrastrucutre as Code/" content moved under
automation/ansible/old-playbooks and automation/iac/old-content as-is
for now - contents still need refreshing against the current repos and
a per-folder README, that's the next pass.

automation/iac/old-content/Ansible/host_vars/haproxy-vm/host_tags.yml

@@ -0,0 +1,32 @@
+# VM metadata from Terraform provisioning
+vmid: id number here
+vm_name: "vm name"
+target_node: "hypervisor node name"
+template: "template-name"
+cores: 1
+sockets: 1
+memory: 4096
+bridge: vmbr0
+macaddr: "xx:x:x:x:x:x"
+disk_size: 20GB
+disk_storage: "storage name here"
+ip: xx.xx.xx.xx
+vlan: 0
+vm_tags:
+  - packages
+  - hostname_network
+  - root_password
+  - disk_resize
+  - base_users
+  - firewall_ssh
+  - endlessh
+  - zsh_custom
+  - vault_agent
+  - haproxy
+  - ssh_hardening
+  - banners
+  - file_permissions
+  - service_disable
+  - kernel_hardening
+
+