recipe-maintainer: public snapshot (secrets + deployment plans removed, single commit)

Sanitized single-commit public mirror of recipe-maintainer.
- Removed test-ssh/.testenv (live creds); added test-ssh/.testenv.example placeholders.
- Removed plans/ and planned-updates/ (deployment-planning docs) so no client/
  deployment domains appear in the public repo.
- All other secret stores were already gitignored.
- docs.coopcloud.tech retained as a submodule (public upstream).

terraform/terraform.tfvars.example

@@ -0,0 +1,15 @@
+# Copy to terraform.tfvars and fill in values
+#
+# Get a DO API token from: https://cloud.digitalocean.com/account/api/tokens
+# If using setup.sh, these are generated automatically from .testenv.
+
+do_token    = "dop_v1_..."
+reserved_ip = "x.x.x.x"
+
+# Optional overrides (defaults shown):
+# domain               = "t1cc.commoninternet.net"
+# droplet_name         = "coopcloud-test"
+# region               = "ams3"
+# size                 = "s-2vcpu-4gb"
+# image                = "debian-13-x64"
+# ssh_private_key_path = "../test-ssh/test-ssh-keys/nptest"