Establish clean homelab infrastructure baseline

Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.

apps/shared-postgresql/shared-postgresql-init.sql

@@ -0,0 +1,18 @@
+-- Roles come from globals.sql; this script only creates databases and grants.
+SELECT 'CREATE DATABASE e5renew'
+WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'e5renew')\gexec
+
+GRANT ALL PRIVILEGES ON DATABASE e5renew TO postgres;
+
+SELECT 'CREATE DATABASE casdoor'
+WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'casdoor')\gexec
+GRANT ALL PRIVILEGES ON DATABASE casdoor TO casdoor;
+
+SELECT 'CREATE DATABASE gitea'
+WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'gitea')\gexec
+GRANT ALL PRIVILEGES ON DATABASE gitea TO gitea;
+
+-- authelia: role created out-of-band (see authelia/README.md); DB owned by it.
+SELECT 'CREATE DATABASE authelia OWNER authelia'
+WHERE NOT EXISTS (SELECT FROM pg_database WHERE datname = 'authelia')\gexec
+GRANT ALL PRIVILEGES ON DATABASE authelia TO authelia;