Establish clean homelab infrastructure baseline

Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.

apps/netbox/terraform/versions.tf

@@ -0,0 +1,20 @@
+terraform {
+  required_version = ">= 1.5"
+  required_providers {
+    netbox = {
+      source = "e-breuninger/netbox"
+      # ⚠ Pin to 5.x. Provider 4.3.1 FAILS against NetBox 4.6 at provider-configure time
+      # with a go-openapi error ("... is not supported by the TextConsumer"); 5.7.0 works.
+      version = "~> 5.0"
+    }
+  }
+}
+
+# Same pattern as ../../../infrastructure/openbao/terraform and ../../../infrastructure/cloudflared/terraform: credentials come
+# from outside the repo, state is local and gitignored.
+provider "netbox" {
+  # ⚠ BASE URL ONLY — no /api suffix. Passing ".../api" produces the same misleading
+  # TextConsumer error as the version mismatch above and costs an hour to diagnose.
+  server_url = var.netbox_url
+  api_token  = var.netbox_token
+}