recipe-maintainer: public snapshot (secrets + deployment plans removed, single commit)

Sanitized single-commit public mirror of recipe-maintainer.
- Removed test-ssh/.testenv (live creds); added test-ssh/.testenv.example placeholders.
- Removed plans/ and planned-updates/ (deployment-planning docs) so no client/
  deployment domains appear in the public repo.
- All other secret stores were already gitignored.
- docs.coopcloud.tech retained as a submodule (public upstream).

recipe-info/mumble/setup.md

@@ -0,0 +1,35 @@
+# Mumble — First-Time Setup
+
+## Prerequisites
+
+- DNS: `mumble.<DOMAIN_SUFFIX>` should resolve to the server (needed for app identity and optional web client)
+- Port 64738 TCP+UDP must be open on the server firewall (mumble protocol, published directly on the host)
+
+## Steps
+
+1. **Create the app:**
+   ```bash
+   abra app new mumble --server <SERVER> --domain mumble.<DOMAIN_SUFFIX> --no-input
+   ```
+
+2. **Generate secrets:**
+   ```bash
+   abra app secret generate mumble.<DOMAIN_SUFFIX> --all -m --no-input
+   ```
+   Save output to `recipe-info/testsecrets/mumble.<DOMAIN_SUFFIX>`.
+
+3. **Deploy:**
+   ```bash
+   abra app deploy mumble.<DOMAIN_SUFFIX> --chaos --force --no-input
+   ```
+
+4. **Verify:** Connect with a Mumble client to `<SERVER>:64738`, or check that the service is running:
+   ```bash
+   abra app ps mumble.<DOMAIN_SUFFIX>
+   ```
+
+## Notes
+
+- Mumble uses its own protocol (not HTTP) — no Traefik routing needed for voice.
+- The superuser password is stored as a Docker secret (`su_password`).
+- To enable the web client, uncomment the `compose.mumbleweb.yml` line in the app's `.env` file.