recipe-maintainer: public snapshot (secrets + deployment plans removed, single commit)

Sanitized single-commit public mirror of recipe-maintainer.
- Removed test-ssh/.testenv (live creds); added test-ssh/.testenv.example placeholders.
- Removed plans/ and planned-updates/ (deployment-planning docs) so no client/
  deployment domains appear in the public repo.
- All other secret stores were already gitignored.
- docs.coopcloud.tech retained as a submodule (public upstream).

recipe-info/keycloak/dependencies.md

@@ -0,0 +1,9 @@
+# Keycloak Test Dependencies
+
+## lasuite-docs
+
+La Suite Docs is used as an OIDC relying party for integration testing. The `oidc_integration.py` test verifies that Keycloak can issue tokens and that a real application accepts them.
+
+- **Do not undeploy** lasuite-docs during `/test-context-reset` when testing keycloak.
+- The OIDC integration is configured via `recipe-info/lasuite-docs/setup_keycloak_integration.py`.
+- Test credentials are stored in `recipe-info/lasuite-docs/keycloak-test-credentials.<DOMAIN_SUFFIX>.toml`.