recipe-maintainer: public snapshot (secrets + deployment plans removed, single commit)

Sanitized single-commit public mirror of recipe-maintainer.
- Removed test-ssh/.testenv (live creds); added test-ssh/.testenv.example placeholders.
- Removed plans/ and planned-updates/ (deployment-planning docs) so no client/
  deployment domains appear in the public repo.
- All other secret stores were already gitignored.
- docs.coopcloud.tech retained as a submodule (public upstream).

recipe-info/authentik/upstream.md

@@ -0,0 +1,15 @@
+# Authentik Upstream
+
+## Main Project
+
+- **Repository:** https://github.com/goauthentik/authentik
+- **Releases:** https://github.com/goauthentik/authentik/releases
+- **Website:** https://goauthentik.io
+- **Docs:** https://docs.goauthentik.io
+
+## Images
+
+| Service | Image | Release Notes |
+|---------|-------|---------------|
+| app, worker | `ghcr.io/goauthentik/server` | https://github.com/goauthentik/authentik/releases |
+| db | `postgres` | https://www.postgresql.org/docs/release/ |