recipe-maintainer: public snapshot (secrets + deployment plans removed, single commit)

Sanitized single-commit public mirror of recipe-maintainer.
- Removed test-ssh/.testenv (live creds); added test-ssh/.testenv.example placeholders.
- Removed plans/ and planned-updates/ (deployment-planning docs) so no client/
  deployment domains appear in the public repo.
- All other secret stores were already gitignored.
- docs.coopcloud.tech retained as a submodule (public upstream).

test-ssh/.testenv.example

@@ -0,0 +1,6 @@
+# Copy to test-ssh/.testenv and fill in. Used by the test harness for the
+# Gitea API (PR creation, mirror sync) and Tailscale mesh access. Never commit the real file.
+TS_AUTH_KEY=tskey-xxxxx
+GITEA_USERNAME=your-bot-username
+GITEA_PASSWORD=your-bot-password-or-token
+GITEA_URL=git.example.com

test-ssh/ssh-config.example

@@ -0,0 +1,9 @@
+Host something.mytestserver.net
+        User myuser
+        IdentityFile /workspace/test-ssh/test-ssh-keys/mytestsshkey
+        Port 2246
+
+Host something2.mytestserver.net
+        User root
+        IdentityFile /workspace/test-ssh/test-ssh-keys/mytestsshkey
+        Port 22