recipe-maintainer: public snapshot (secrets + deployment plans removed, single commit)

Sanitized single-commit public mirror of recipe-maintainer.
- Removed test-ssh/.testenv (live creds); added test-ssh/.testenv.example placeholders.
- Removed plans/ and planned-updates/ (deployment-planning docs) so no client/
  deployment domains appear in the public repo.
- All other secret stores were already gitignored.
- docs.coopcloud.tech retained as a submodule (public upstream).

.claude/commands/switch-default-instance.md

@@ -0,0 +1,32 @@
+---
+description: Switch the default test instance (b1cc or t1cc) for all recipe operations
+argument-hint: <b1cc|t1cc>
+allowed-tools: [Bash, Read, Grep, Glob]
+---
+
+# Switch Default Instance
+
+Switch the default test instance used by all recipe skills. This updates `default_instance` in `settings.toml`. Domain is computed dynamically via `get_test_instance.py`, so no global find-and-replace is needed.
+
+The target instance is: $ARGUMENTS
+
+Read and follow the instructions in `.claude/commands/includes/logging.md`.
+
+## Steps
+
+1. **Validate the argument** — `$ARGUMENTS` must be either `b1cc` or `t1cc`. If it's empty or something else, tell the user the valid options and stop.
+
+2. **Check the current instance** — run:
+   ```bash
+   python3 scripts/switch_default_instance.py
+   ```
+   This shows the current default and available instances. If the current default already matches the requested instance, tell the user and stop (no work needed).
+
+3. **Run the switch script**:
+   ```bash
+   python3 scripts/switch_default_instance.py $ARGUMENTS
+   ```
+
+4. **Verify** — run `python3 scripts/get_test_instance.py` and confirm the SERVER uses the new instance's domain suffix.
+
+5. **Summarise** — tell the user which instance is now active and what the test server domain is (`<instance>.commoninternet.net`).