Establish clean homelab infrastructure baseline

Reorganize the brownfield repository, remove retired and generated artifacts, harden ignore rules, and record the GitOps/IaC redesign.

infrastructure/openbao/ansible/roles/openbao_ssh_ca_trust/handlers/main.yml

@@ -0,0 +1,14 @@
+---
+# Validate the config BEFORE reloading — a broken sshd config must never be applied
+# (lock-out risk). If `sshd -t` fails the play errors here and the reload never runs,
+# so the running sshd keeps its current (good) config.
+- name: reload sshd
+  ansible.builtin.command: sshd -t
+  changed_when: false
+  listen: reload sshd
+
+- name: reload sshd service
+  ansible.builtin.service:
+    name: "{{ openbao_ssh_service }}"
+    state: reloaded
+  listen: reload sshd