recipe-maintainer: public snapshot (secrets + deployment plans removed, single commit)

Sanitized single-commit public mirror of recipe-maintainer.
- Removed test-ssh/.testenv (live creds); added test-ssh/.testenv.example placeholders.
- Removed plans/ and planned-updates/ (deployment-planning docs) so no client/
  deployment domains appear in the public repo.
- All other secret stores were already gitignored.
- docs.coopcloud.tech retained as a submodule (public upstream).

recipe-info/lichen-markdown/setup.md

@@ -0,0 +1,31 @@
+# Setup
+
+## Prerequisites
+
+- DNS A record for `lichen-markdown.<DOMAIN_SUFFIX>` pointing to `<SERVER>`
+
+## Deploy
+
+```bash
+abra app new lichen-markdown --server <SERVER> --domain lichen-markdown.<DOMAIN_SUFFIX> --no-input
+abra app secret generate lichen-markdown.<DOMAIN_SUFFIX> --all -m --no-input
+abra app deploy lichen-markdown.<DOMAIN_SUFFIX> --chaos --force --no-input
+```
+
+## Environment variables
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `LICHEN_USERNAME` | `admin` | CMS login username |
+| `LETS_ENCRYPT_ENV` | `production` | `production` or `staging` |
+| `ENABLE_BACKUPS` | `true` | Enable backupbot |
+
+## Secrets
+
+| Secret | Description |
+|--------|-------------|
+| `lichen_password` | CMS login password (auto-generated) |
+
+## Accessing the CMS
+
+Visit `https://lichen-markdown.<DOMAIN_SUFFIX>/admin` and log in with `LICHEN_USERNAME` / `lichen_password`.